Cyber Security Engineer Sarasota, FL

Overview

Job Title:

Cybersecurity Engineer

Job Location:

per contract location or Rampant Office locations – Sarasota, FL

Rampant Technologies is an Equal Opportunity Employer committed to diversity and continuous improvement. This role supports national security missions and government transformation for Intelligence, Defense, and Federal Civilian customers.

Functional Responsibilities:

• SME on problem identification, diagnosis, and resolution of problems
• Develop best practices for processes and standards to improve the system
• Perform vulnerability assessments using standardized tools (Nessus, DISA STIGs) and implement configuration updates to meet security requirements
• Track and fulfill liens associated with A&A activities as documented in the Plan of Actions and Milestones
• Perform hardening of operating systems, COTS, and open-source products
• Validate best practices in penetration testing, configuration analysis, and security
• Prepare comprehensive security assessment testing documentation to validate applied security controls in support of A&A testing; generate/maintain RMF artifacts (e.g., Security Requirements Traceability Matrix, Security Plans, Certification Test Plans, Continuous Monitoring Plans)
• Perform timely updates in accreditation databases
• Provide technical guidance focused on information security architecture

Education:

Bachelor’s degree in Computer Science, Information Assurance, Information Security System Engineering, or related discipline. Without a degree, twelve (12) years of Cybersecurity Engineer experience may be substituted for a bachelor’s degree.

Required

Experience and Skills:

• Minimum of eight (8) years of relevant experience as a Cybersecurity Engineer in programs/contracts of similar scope; ideally 3+ years at the same level for like role
• Experience with A&A process (e.g., ICD-503) and information security/continuous monitoring per NIST SP 800-53 and NIST SP 800-53A
• Knowledge of DCID 6/3, ICD 503, CNSSI 1253, NIST SP 800-53, 800-53A, 800-37; security controls assessment; integrity, availability, authentication, non-repudiation
• IT security principles and methods; network access and PKI concepts; security system design tools and techniques
• Familiarity with laws, policies, or governance related to critical infrastructure
• TCP/IP networking, Linux administration, patch management, vulnerability management for Windows and Linux
• Continuous monitoring per NIST SP 800-137; virtualization (VMware, Docker); OSI model knowledge;
  DoD/IC security controls; XACTA and SNOW
• Experience with security testing tools (ACAS, Wireshark, Retina, Tripwire); proficiency with Microsoft Office, Project, Visio
• Self-starter with strong written and verbal communication

Desired Experience/

Skills:

• Understanding of Independent Assessor principles and confidentiality requirements
• Ability to articulate business/technical needs to diverse stakeholders
• Experience in a matrixed environment; collaboration and coalition-building
• Professional interaction with all levels of the organization

• Assist Principal Engineer (PE) with customer relationship management and issue escalation
• Support project/task execution and monitoring; lead tasks may apply at Mid/Senior levels
• Evaluate information from multiple sources; share knowledge with new team members
• Ensure timely task delivery, contract documentation, quality reviews, and status reporting
• Provide feedback to PEs on challenges that affect delivery and communicate schedule constraints
• Contract escalation resolution within internal teams and with the customer as needed
• Identify upsell opportunities within existing contracts and assist with RFI/RFPs when warranted
• Maintain open communication lines when matrixed to other contracts
• Adhere to performance measures and annual goals; perform other duties as assigned

• Active TS/SCI with poly required
• DoD 8570 IAM or IAT Level 3 certification required; if not held at start, must obtain within 6 months and maintain thereafter
• IAT Level II certifications (Security+ or equivalent)

All output, communications, materials will be in English. Physical demands are predominantly stationary, office-centric work; travel may be required.

Voluntary EEO and disability self-identification information is collected for federal contracting purposes. Information provided is confidential and used to measure diversity and compliance with equal opportunity obligations.