Cybersecurity Engineer

Thank you for considering IT Concepts dba Kentro, where innovation drives opportunity and collaboration leads to success. Our dynamic community of experts is fully committed to advancing our customers' missions, fostering professional growth, and making a positive impact on our communities.

By joining our supportive community, you will find that Kentro is dedicated to your personal and professional development. Together, we can drive meaningful change, spark innovation, and achieve extraordinary milestones.

Kentro is hiring for a Cybersecurity Engineer to support NGA Vertex Information Technology (IT) Services Task Order

Location:

Onsite NGA, Springfield, VA

Compensation Range:
The anticipated base salary range for this position is $145,000–$180,000 annually and reflects Kentro’s good-faith expectations at the time of posting. Final compensation is determined based on the role’s requirements, relevant skills, experience, education, certifications, work location, applicable security clearance requirements, market conditions, internal equity, and contract requirements.

This Job Description reflects the primary duties of the role; however, it is not intended to be all‑inclusive. Team members may be asked to take on additional responsibilities in alignment with customer expectations, business needs, and Kentro’s culture of collaboration and adaptability.

• Develop, write, and maintain a formal Information Systems Security Program (ISSP) that includes all applicable security Information Systems (IS) documentation in accordance with NGA/OCIO policies for up to 16 SPIDS under continuous monitoring protocols and standards, including, but not limited to:
  Concept of Operations (CONOPS), System Security Plans (SSPs), System Security Authorization Agreements (SSAAs), Security-related Interconnection Security Agreements (ISAs), Memorandums of Understanding/ Agreement (MOUs/MOAs), Network and system diagrams and Security Requirement Traceability Matrices (SRTMs).
• Adopt and maintain a customer notification and enforcement process for implementing IS security policy changes, in coordination with the Office of Expeditionary Operations (IX) GPOCs and in coordination with IX support contractors.
• Conduct periodic reviews to ensure compliance with the SSP. Conduct these compliance reviews no later than three business (3) days following notification of a reported incident.
• Ensure configuration management (CM) for security-relevant IS software, hardware, and firmware is maintained and documented by means that include monthly review of firmware versions for hardware models contained in IX inventory and notify customer of required updates.
• Ensure the development of system assessment documentation by reviewing and endorsing such documentation and recommending action to the Authorizing Official/Delegated Authorizing Official (AO/DAO).
• Ensure approved procedures are in place for clearing, purging, declassifying, and releasing system memory, media, and output and provide procedures and SOP to GPOC and IX support contractors.
• Maintain as required by the AO/DAO and other regulatory guidance, a repository for all current and historic system assessment documentation and modifications.
• Coordinate and conduct IS security inspections, tests, and reviews as tasked by the IX Government Information Security Manager (GPOC) in coordination with the applicable Program/Project Manager (PM).
• Develop, review, and update procedures for responding to security incidents and for investigating and reporting (to IX management, the AO/DAO Representative, and local management) security violations and incidents, as appropriate coordination with GPOC.
• Ensure proper protection or corrective measures have been taken when an…