Cyber Security Engineer

Want to work remotely for a fun, fast-paced company that wants to make a difference in this crazy world?

The selected candidate will support the design and engineering of a DevOps Platform to enable a shared system of systems to support software development, systems engineering, integration, and test of software applications and infrastructure in a heterogeneous environment. This effort will support the United States Defense Health Agency (DHA) and will use be heavily focused on automation and DevSecOps. Provides support to NIWC/EIDS Cyber with focus on ongoing MIP SF c-ATO activities.

• Supports C ATO and ensure CI/CD confirms to C ATO requirements. 
• Manages Hardened Containers.
• Supports STIGs, Scanning and Mitigation of findings.
• Performs POAM management.
• Within Cloud Environments, support the development and documentation of risk assessment results and recommendations using identified threats, applicable vulnerabilities, and likelihood of occurrence within context of risk tolerances, providing recommendations for corrective actions and mitigation strategies.
• Provide automated and manual validations of Information Assurance Controls (IACs) and Validation Procedures (VPs) in accordance with the DoD Guidelines, CNSSI 1253 and/or NIST 800 Publications.
• Perform validation, troubleshooting, and documentation for Continuous ATO engineering efforts.
• Document security processes for use by cloud application development teams.
• Participates in Agile process to develop tasking, describe technical solutions, and test deployed systems.
• Provides inputs to technical assessments related to the security posture of a system.
• Collaborates with technical writers to create security-relevant documentation.
• Coordinates with project work teams to ensure adherence to policies, achievement of quality targets and delivery on schedule milestones.

• Six (6) years of experience in the area of information technology, software engineering and application software

  development for C4ISR systems or other federal agency IT Systems to include: Technology Analysis and Assessment, Requirements

  Definition, Design Definition, Development of Systems Specification, Systems Analysis, Systems Architecture, Software Development, Verification and Validation, Writing technical documentation, procedures and/or guidelines, Training, Systems/Equipment Integration, Production Release or Installation. This individual shall specify required experience through training and work.

  Note: Experience may be concurrent.

• US Citizenship Required.
• Most be able to obtain Interim to Qualify (Favorable T3 Equivalent Background Investigation) or hold Active DoD Secret Clearance.
• Valid CompTIA Security+ or equivalent certification (Minimum: DoD 8570.1-M IAT Level II), or ability to obtain within a reasonable timeframe.

• Bachelor’s degree in Business, Business Administration, Computer Applications, Computer Forensics, Computer Graphics, Computer Sciences, Computer Information Systems, Computer Network Systems, Cyber Security, Engineering (Note: All various engineering degrees), English, Education, Information Assurance, Information Management, Information Systems, Information Security, Information Technology, Journalism, Management Information Systems, Mathematics, Military Art and Science, Network and Communications Management, Psychology (NOTE: acceptable only if degree included courses in “Human Systems Interface (HSI)” and “Human Factors Engineering (HFE)”), Physics, Physical Sciences, Quality Assurance, Sciences, Statistics, Software Development, Systems Administration, Technical Writing or Technology. Working towards the following certifications within one and a half year after assuming duties: CompTIA Security+ ce, CompTIA A+ ce, CompTIA Network+ ce, Certified Authorization Professional (CAP),Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), Certified Secure Software Lifecycle Professional (CSSLP), Information Systems Security Architecture Professional (CISSP-ISSAP), Information Systems Security

  Engineering Professional (CISSP-ISSEP), Systems Security Certified Practitioner (SSCP), Professional Software Engineering Master (PSEM), Certified Software Development Professional (CSDP) or with COR approval complete a vendor/platform specific certification: Microsoft, Java, Adobe Sun, Red Hat, CISCO, Oracle or other information technology software application development certifications.

• Must have experience in DOD STIGS. 
• Must have experience with RMF accredidation process. 

Minimum Clearance Requirements:  Minimum of an Active Interim Secret Clearance (DoD) / Favorable T3 Equivalent Background Investigation

• Prior experience evaluating/assessing systems in Government Cloud environments using DevSecOps principals with Continuous Security.
• Proven experience achieving Continous ATO in DoD.

Founded in 2010, Sev1Tech provides IT, engineering, and program management solutions delivery. Sev1Tech focuses on providing program and IT support services to critical missions across Federal and Commercial Clients. Our Mission is to Build better companies. Enable better government. Protect our nation. Build better humans across the country.

Join the Sev1Tech family where you can achieve great accomplishments while fostering a satisfying and rewarding career progression. Please apply directly through the website at: https://www.sev1tech.com/careers/ #joinSev1tech

For any additional questions or to submit any referrals, please contact:david.clement@sev1tech.com

Sev1Tech is an Equal Opportunity and Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.