Apply on Employer Site

ParsonsKellogg · 5 hours ago

Senior System Security Engineer

US - CO, Boulder

Full-time

Hybrid

Senior Level, Lead/Staff

$129K/yr - $232K/yr

8+ years exp

ParsonsKellogg is seeking a talented Senior Cyber Security Engineer to join their growing team. The role involves serving as a technical subject matter expert for RMF-based cybersecurity assessments, developing RMF artifacts, and supporting various cybersecurity processes and assessments.

AdvertisingMarketing

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Serve as the technical SME for RMF-based cybersecurity assessments and system authorization strategies

Develop and update RMF artifacts, including some or all of the following: System Security Plans (SSPs), Security Control Traceability Matrices (SCTMs), Configuration Management Plans, Incident Response Plans, Continuous Monitoring (CONMON) Plans, POA&Ms and Security Assessment Reports (SARs)

Support the IATT, ATC, and ATO processes, supporting internal engineering teams and external Authorizing Officials (AOs)

Perform system-level security control assessments (NIST SP 800-53) and validation of security posture

Evaluate external connection risks and support the ATC approval process with boundary defense configurations and enclave protections

Support vulnerability and compliance scans using tools such as ACAS, Tenable Security Center, STIG Viewer, and Evaluate STIG

Work with development and infrastructure teams to define, validate, and maintain secure configurations and baselines

Maintain and update continuous monitoring (CONMON) processes, collect metrics, track findings, and coordinate with ISSMs and stakeholders

Draft and maintain cyber documentation required for accreditation package submission

Assist in security impact analyses for changes in configuration, new software deployments, or system modifications

Qualification

RMF-based cybersecurity assessmentsCompTIA Sec+DoD cybersecurity frameworksNIST cybersecurity controlsCybersecurity certificationsSystem administration (Linux)Network administrationVMwareKubernetesDocker

Required

Active Secret Clearance

Bachelor's degree in Software, Computer, Systems, Electrical, Information Technology Engineering, or a related technical field. Additional years of experience can count in lieu of a degree

8+ years of related experience

CompTIA Sec+

Experience with RMF-based cybersecurity assessments

Experience supporting IATT, ATO, or ATC approval efforts

Strong understanding of DoD and NIST cybersecurity frameworks and controls