Cyber A&A Engineer
Core
Process and track user account forms, perform security assessments and hardening of systems and networks, and support Assessment and Authorization (A&A) activities for defense programs.
Role type
Cyber A&A Engineer
Builds
Secure and compliant systems and networks for the National Team Command, Control, Battle Management and Communications (C2BMC) Programs & Networks
Domain
Defense / Cybersecurity
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Security Technical Implementation Guide (STIG) assessments, Risk Management Framework (RMF) lifecycle, vulnerability assessments, compliance audits, security engineering, DoD/Federal cybersecurity policy, static and dynamic code analysis
Preferred skills
Windows and Red Hat Enterprise Linux (RHEL) system administration, virtual environment management, container administration, ACAS and ESS administration, ConfigOS
Technologies
STIG Viewer, SCAP, ACAS, ConfigOS, Fortify, SonarQube, eMASS
Responsibilities
Process and track DD Form 2875 user account forms and required training; Perform assessment of systems and networks within a virtual environment to identify deviations from acceptable configurations; Perform STIG assessments and hardening for Windows, RHEL, and networking equipment; Develop test plans reflecting how STIG checks are implemented; Update RMF artifact documentation to ensure system hardening non-compliance is tracked and remediated; Establish strict program control processes to ensure mitigation of risks and supports obtaining assessment and authorization; Perform analyses to validate established cybersecurity controls and requirements; Support program test milestones through pre-test preparations, participating in tests, and preparation of required artifacts; Periodically conduct a complete review of each program support and operational system's audits and monitor corrective actions; Coordinate across the program to address identified deficiencies during RMF assessment activities.
Seniority
Mid-Level (5+ years experience)