Cybersecurity Engineer​/ISSE remote

Description

MUST POSSESS AN ACTIVE SECRET CLEARANCE TO BE CONSIDERED.

WE USE E-VERIFY TO ELECTRONICALLY CONFIRM THE EMPLOYMENT ELIGIBILITY OF NEWLY HIRED EMPLOYEES.

COMPETITIVE SALARY, COMPREHENSIVE BENEFITS AND A COMPANY THAT CARES!

AUSGAR Technologies, Inc., an equal opportunity employer, is an established, Service‑Disabled Veteran‑Owned Small Business (SDVOSB) Department of Defense, government contractor with core competencies in Information Assurance, Cybersecurity and Systems Engineering. With offices on both the East and West coasts, an inviting culture and above‑standard benefits, opportunity abounds for the right individual!

Cybersecurity Engineer/ISSE - 26‑006 - San Diego, CA

As a growing Department of Defense Contractor, AUSGAR Technologies has an exciting opportunity for a Cybersecurity Engineer/ISSE to join our team of smart and innovative technical team members.

• Provide Cybersecurity Engineering and Risk Management Framework (RMF) support for PEO‑Digital.
• Play a critical role in supporting the RMF Assessment and Authorization (A&A) processes for PEO‑Digital.
• Responsible for the technical implementation of the RMF.
• Conduct cybersecurity and risk assessments on networks, systems and applications to identify and mitigate technical and non‑technical vulnerabilities.
• Handle multiple RMF authorization types, including baseline changes, use cases, Assessment Summary Results (ASR), Authorization to Operate (ATO), CAR, Denial of Authorization to Operate (DATO) & HRR/HR.
• Conduct vulnerability assessment and analysis utilizing standard technologies, such as Security Content Automation Protocols (SCAPs), Assured Compliance Assessment Solution (ACAS)/NESSUS scans and DISA Security Technical Implementation Guides (STIGs)/ Security Requirements Guides (SRGs).
• Conduct security assessments and create RMF documentation, including Security Assessment Plans (SAPs), eMASS Security Risk Assessment (SARs), Special Access Programs (SAPs) Executive Summary, SAPs Body of Evidence (BOE).
• Provide accurate assessments and document security posture, capabilities and vulnerabilities.
• Lead the creation of the SAPs and SARs and convey technical findings and risk assessments.
• Perform detailed risk analysis, identify system vulnerabilities and provide comprehensive recommendations for risk mitigation.
• Verify, validate and document risk, perform Security Control Assessments (SCAs) and document compliant and failed security controls in eMASS.
• Assess STIGs and SRGs.
• Ensure traceability of all vulnerabilities from raw assessment results to the Plan of Action and Milestones (POA&Ms).
• Support the Continuous Security Monitoring (CSM) program as necessary.

The physical demands and work environment described here are representative of those that must be met by an employee to successfully perform the essential functions of the job. Reasonable accommodation may be made for individuals with disabilities to perform the essential functions.

• Active Secret clearance required.
• Security+ CE is required, CISSP is desired.
• Bachelor's degree in Information Technology or related field or business‑related field
• Desired:
  Advanced degree in Information Technology or related field or business or related field
• Minimum of 5‑7 years of experience in cybersecurity risk assessment and supporting RMF A&A processes for DoD and Navy systems.
• Hands‑on experience conducting vulnerability assessment and analysis utilizing standard technologies, such as SCAPs, ACAS/NESSUS scans, and DISA STIGs/SRGs
• Experience developing mitigations and writing mitigation statements for ongoing vulnerabilities.
• Experience using eMASS.
• Experience working in Navy environments.
• Experience with wireless networks technology.
• Experience with Visio required.
• Ability to author and maintain policy documents in support of RMF and Vulnerability Management.
• Good working knowledge of Windows and RHEL OS, layer 2 and 3 network devices and supporting infrastructure.
• Analytical skills to troubleshoot high‑level, complex, technical problems.
• Employ strong written and verbal communication skills to advise various levels of technology stakeholders, program initiatives and accrediting authorities on security…