Security Engineer II

Paragon Technology is hiring a Security Engineer II to support USTRANSCOM under the PEO-T contract at Scott AFB, IL (onsite). This role brings together security engineering, vulnerability and risk assessment, and security implementation work, with a clear focus on helping mission teams deliver compliant, mission-aligned capabilities through disciplined, government-aligned collaboration.

Compensation
: USD 80,000 - 85,000 per year.

• Review evolving NIST requirements to support risk assessment activities tied to affiliated system requirements and specifications, including execution, mapping, and compliance tracking.
• Develop detailed specifications to mitigate or remediate cybersecurity deficiencies identified during risk assessment, and perform follow-up risk assessments to help ensure secure coding practices and STIG/SRG implementation are built in and enforced.
• Collaborate with government customers to develop and support POA&Ms
  , including support for risk acceptance activities to sustain risk management processes.
• Design and implement solutions to protect the confidentiality, integrity, and availability of sensitive information.
• Provide technical evaluations of IT systems and support security improvements.
• Participate in the design of information system contingency plans that maintain appropriate protection levels and meet time requirements to minimize operational impact to the customer organization.
• Conduct security product evaluations and recommend products, technologies, and upgrades to strengthen the organization’s security posture.
• Perform testing and review audit logs to evaluate the effectiveness of current security measures.
• Support team deliverables, including drafting deliverables and participating in peer reviews.

• Support security authorization documentation activities, including family plans and supplementary artifacts, in accordance with the Department of War (DoW) implementation of the Risk Management Framework (RMF).
• Maintain authorization readiness for PMO programs through activities such as categorization, control selection, evidence collection and audit, risk assessments, reporting, security impact assessments associated with change management practices, and ISCM
  .
• Contribute to A&A reporting and related requirements such as FISMA reporting and Continuous Monitoring.
• Generate, sustain, extend (when appropriate), and report status tied to POA&M requirements.
• Use the DoW Enterprise Mission Assurance Support Service (eMASS) system to support authorization-related workflows.

• Review vulnerability scan outputs using ACAS
  /
  Nessus
  , analyze results to identify vulnerabilities, recommend mitigation and remediation actions, and ingest actions in eMASS
  .
• Provide support to help the Government Customer conduct critical review of documented DISA STIGs/SRGs
  , including technical feedback and recommendations to improve reporting of accurate qualitative results, and ingesting the final product into the government-supplied tool to support risk assessment of NIST controls.

• Participate in Technical Interchange Meetings (TIMs) on a range of PMO security engineering topics.
• Participate in acquisition program engineering milestone reviews.
• Coordinate with Development contract personnel in Security, System Administration, System Engineering, and other supporting roles to identify, document, and plan security enhancement requirements, and resolve program security issues.
• Coordinate with inheritance providers (including enterprise teams and security offices such as SDDC
  , AMC
  , and DISA Security
  ) to determine hybrid security requirements and establish…