Remote Position
Cybersecurity Engineer, Clearance Required
🌍 Remote · United States
💼 Full-time
Job Description:
- Support an Army program modernizing platform infrastructure through secure, scalable, cloud-enabled systems
- Serve as a cybersecurity advisor to the Information System Security Manager, System Owners, and technical engineering teams
- Maintain the system security authorization package in eMASS
- Prepare and maintain RMF artifacts, including the System Security Plan, Security Assessment Report, Continuous Monitoring Strategy, and supporting control evidence
- Curate and validate evidence for NIST SP 800-53 Revision 4 to Revision 5 transition and ongoing security control implementation
- Create, track, and update POA&Ms in eMASS and internal ticketing workflows
- Work with System Owners, Cloud Architects, System Engineers, and System Administrators to define remediation timelines, risk mitigation statements, and resource needs
- Review noncompliance closures and remediation evidence before ISSM and Authorizing Official approval
- Assess the technical and operational impact of directed cybersecurity tasks on cARMY AWS architecture, workloads, and cloud boundaries
- Conduct and review DISA STIGs and Security Requirements Guides using STIG Viewer and automated compliance tools
- Integrate vulnerability analysis, secure configuration validation, and DevSecOps activities into GitLab CI/CD and Agile workflows
- Support continuous monitoring and vulnerability scanning through ACAS and related tools
- Maintain cybersecurity dashboards and track POA&M aging, vulnerability trends, operational security tickets, incident responses, and change approvals
Requirements:
- Active Secret security clearance
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field
- 5 or more years of experience in cybersecurity engineering, information assurance, RMF, or secure systems operations
- Active DoDI 8140 qualification
- Strong understanding of DoD cloud security, including AWS GovCloud, Azure IL5 or IL6, Zero Trust, and hybrid architectures
- Experience developing or maintaining RMF authorization artifacts and managing POA&Ms in eMASS or a comparable authorization workflow
- Practical experience applying NIST SP 800-53 controls, DoD STIGs, and security assessment requirements during system development or sustainment
- Experience with cloud security operations, vulnerability management, or security monitoring in AWS or another cloud environment
- Familiarity with Agile development, DevSecOps principles, and secure system lifecycle planning
- Clear communication skills and experience working with technical and program stakeholders to resolve findings and meet deadlines
- Experience supporting Army or DoD programs (preferred)
- Hands-on experience with AWS Security Hub, CloudWatch, CloudTrail, EvaluateSTIG, ACAS, STIG Viewer, Power BI, ServiceNow, or GitLab CI/CD (preferred)
- Experience with containerized workloads, cloud-native services, Linux, databases, web servers, or other enterprise system baselines (preferred)
- Familiarity with SAFe or another Agile framework and incremental delivery cycles (preferred)
- Must be a U.S. citizen or eligible for a U.S. Government security clearance
Benefits: Apply To This Job