Cyber Security Engineer

Job Description

Job Description

Job Title: Cyber Security Engineer

Responsibilities

• Serve as the primary custodian of the system security authorization package within the Enterprise Mission Assurance Support Service (eMASS).
• Prepare, author, and maintain RMF artifacts, including the System Security Plan (SSP), Security Assessment Report (SAR), Continuous Monitoring Strategy, and supporting security control evidence.
• Lead the curation and validation of evidence supporting NIST SP 800-53 Rev. 4 to Rev. 5 transition activities and control implementation.
• Author, monitor, track, and update Plans of Action and Milestones (POA&Ms) in eMASS and internal ticketing workflows.
• Partner with System Owners, Cloud Architects, System Engineers, and System Administrators to define remediation timelines, risk mitigation statements, and resource requirements.
• Review non-compliance closures and remediation evidence before formal submission for ISSM and Authorizing Official (AO) approval.
• Conduct technical and operational impact assessments for directed cyber tasks affecting the cARMY AWS system architecture, workloads, and cloud boundaries.
• Conduct and review DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) using STIG Viewer and automated compliance tooling.
• Support GitLab CI/CD delivery by integrating vulnerability analysis, secure configuration validation, and other DevSecOps security activities into Agile workflows.
• Oversee continuous monitoring activities using applicable tools; manage vulnerability scanning through ACAS and related tooling.
• Maintain cybersecurity dashboards, track POA&Ms aging and vulnerability trends, and monitor operational security tickets, incident responses, and change approvals.

Requirements

• Active Secret security clearance.
• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity or related field.
• 5+ years of experience in cybersecurity engineering, information assurance, RMF, or secure systems operations.
• Active DoDI 8140 qualification.
• Demonstrated experience developing or maintaining RMF authorization artifacts and managing POA&Ms in eMASS or a comparable authorization workflow.
• Practical experience applying NIST SP 800-53 controls, DoD STIGs, and security assessment requirements to system development or sustainment.
• Experience with cloud security operations, vulnerability management, or security monitoring in AWS or another cloud environment.
• Experience collaborating with technical and program stakeholders to resolve security findings and meet suspense deadlines.

Preferred Qualifications:

• Experience supporting Army or DoD programs
• Hands-on experience with AWS Security Hub, CloudWatch, CloudTrail, EvaluateSTIG, ACAS, STIG Viewer, Power BI, ServiceNow, or GitLab CI/CD.
• Experience with containerized workloads, cloud-native services, Linux, databases, web servers, or other enterprise system baselines.
• Familiarity with Agile frameworks such as SAFe and with incremental delivery

System One, and its subsidiaries including Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

#LI-KA1 #M1 Ref: #851-Rockville-S1