cFocus Software Incorporated · 2 days ago
DOW - Cyber Security Engineer
cFocus Software Incorporated is seeking a Cyber Security Engineer to join their program supporting the Department of Defense (DoD). The role involves maintaining cybersecurity standards and compliance, conducting vulnerability assessments, and integrating security practices into development workflows.
ChatbotGovernmentInformation TechnologySoftware
Responsibilities
Support and maintain the DSAID Authority to Operate (ATO) through RMF lifecycle activities
Implement, assess, and document NIST SP 800-53 and NIST SP 800-171 security controls
Develop and maintain System Security Plans (SSP), Security Assessment Reports (SAR), and Plans of Action and Milestones (POA&M)
Conduct vulnerability scanning, security control assessments, and continuous monitoring activities
Support remediation of vulnerabilities identified through ACAS, STIGs, and security scans
Ensure compliance with DoD cybersecurity policies, Privacy Act requirements, and data protection standards
Coordinate with system owners, developers, DBAs, and operations staff to integrate security into system design and changes
Support security impact analyses for system enhancements, configuration changes, and vendor updates
Assist with incident response, cybersecurity reporting, and audit support
Support DevSecOps activities by embedding security practices into Agile development workflows
Ensure compliance with Section 508 requirements where applicable to system interfaces
Participate in technical reviews, security working groups, and Government meetings
Support transition-in, knowledge transfer, and sustainment activities
Develop and maintain cybersecurity documentation and standard operating procedures
Qualification
Required
Bachelor's degree in Cybersecurity, Information Assurance, Information Technology, or a related field
Minimum of 7 years of experience supporting cybersecurity for enterprise IT systems
Demonstrated experience with DoD RMF processes and ATO maintenance
Strong knowledge of NIST SP 800-53, NIST SP 800-171, and DoD cybersecurity requirements
Experience supporting vulnerability management, STIG compliance, and continuous monitoring
Familiarity with Agile and DevSecOps development environments
Strong analytical, documentation, and communication skills
Ability to obtain and maintain a Tier 3 (or higher) background investigation
Company
cFocus Software Incorporated
cFocus Software automates FedRAMP compliance and develops government chatbots for the Azure Government Cloud, Office 365, and SharePoint.