Apply on Employer Site

LMI · 2 months ago

Cybersecurity Engineer - Clearance Required

Fort Detrick, MD

Full-time

Onsite

Mid, Senior Level

$131K/yr - $200K/yr

3+ years exp

LMI is a digital solutions provider dedicated to enhancing government impact through innovation. The Cybersecurity Engineer will lead system Assess and Authorize activities for U.S. Army medical devices, ensuring compliance with RMF standards and maintaining the security posture of information systems.

AnalyticsConsultingInformation TechnologyLogisticsManagement ConsultingProfessional Services

Comp. & Benefits

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Lead the development, review and management of system Assess and Authorize documentation to ensure it is compliant with RMF standards

Develop guidance and assists associates through the RMF phases

Perform Risk Management and testing of Federal Information System Controls Audit Manual (FISCAM) and RMF controls utilizing Committee on National Security Systems Instruction (CNSS) Instructions 1253 Security Controls Assessment Procedures pursuant to National Institute of Standards and Technology (NIST) Special Publication 800-53 to maintain the information system's security posture

Lead IATT and ATO activities

Maintain system accreditation status, develops reports, and alerts system proponents when accreditation documentation must be updated

Support the organization's program that implements information systems security technology and procedures, to include access control and authentication of users and transmitted information

Prepare, distribute, and maintain plans, instructions, guidance, and standard operating procedures (SOPs) on the security of information systems

Review Army and DoD policy and develop local policy and procedures that implement the Army and DoD's Cybersecurity subprograms and initiatives

Review and evaluate system and network changes for cybersecurity impact and effect on confidentiality, integrity, availability and overall system security posture

Create and submit Plan of Actions & Milestones (POA&M) for review and approval by the Authorizing Official (AO)

Qualification

Risk Management Framework (RMF)Cybersecurity solutions designSecurity certificationsEMASS experienceCloud computing knowledgeAWS cloud experienceAzure Cloud ExperiencePolicy developmentNetwork security methodologiesTeam collaboration

Required

A BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science, from an ABET accredited or CAE designated institution fulfills the educational requirement for this WRC (conferred within 5 years or able to prove continuous relevant work experience) -OR- Personnel Certifications: Cloud+ or GICSP or SSCP or Security+ or GSEC. If none, must be willing to obtain in first 30-days

3-5 years demonstrated experience designing, implementing, and monitoring cybersecurity solutions

3-5 years demonstrated RMF and eMASS experience

Familiarity with HBSS, Fortify, ACAS /Nessus

Certified Information Systems Security Professional (CISSP) (or Associate), Certified Information Security Manager (CISM), Global Information Assurance Certification Security Leadership Certificate (GSLC), Certified Chief Information Security Officer (CCISO) or equivalent DoD 8570 IAM Level III certification

Must possess and maintain a Secret Security Clearance

Preferred

Knowledge of computer networking concepts and protocols, and network security methodologies

Knowledge of risk management processes (e.g., methods for assessing and mitigating risk)

Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity

Knowledge of cybersecurity principles

Knowledge of cyber threats and vulnerabilities

Knowledge of specific operational impacts of cybersecurity lapses

Knowledge of cloud computing service models Software as a Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS)

Knowledge of cloud computing deployment models in private, public, and hybrid environment and the difference between on-premises and off-premises environments

AWS cloud experience

Azure Cloud Experience

Bachelor's degree in a related field