Cask is a leading Management Consulting firm specializing in delivering business and technical expertise to clients across commercial and government markets. Join the many happy employees at Cask! We have been named a top 5 firm to work for by Consulting Magazine for 5 of the past 6 years.

Cask is seeking an experienced and technical Network and Cyber Test Engineer with knowledge of DoD, IC, and National Security Policies, Regulations, Directives, and Instructions. This position will stress test networks and try to spot potential vulnerabilities, and to work with larger information security teams to evaluate, troubleshoot, and test technologies they identify, diagnose, and resolve information security issues.

Responsibilities

• Review and evaluate System Security Plans (SSPs), System Security Authorization Agreements (SSAAs), systems and networks diagrams, Security Requirements Traceability Matrices (SRTMs), Risk Assessments, and associated Information Systems (IS) Certification and Accreditation (C&A) documents in accordance with Department of Defense (DoD), Intelligence Community (IC), National and Agency standards.
• Observe, evaluate, and document IS security certification testing and prepare Security Certification Test Reports (SCTRs) with findings and recommendations regarding systems; Approval To Operate (ATO). 
• Inspect systems, networks, sites for compliance to InfoSec standards and policies.
• Produce periodic progress reports, preparing various forms of correspondence concerning deficiencies and statuses of SSPs/SSAAs, maintaining, and reporting statistics on personal C&A efforts. 

• Required: Active Secret Clearance
• Minimum of Bachelor’s Degree or higher in relevant field.
• Minimum 5 years of related experience.
• 2 years of experience as an Information Systems Security Manager (ISSM).
• 2 years of experience with performing risk and vulnerability assessments for Risk Management Framework (RMF) in accordance with USMC Enterprise Cybersecurity Manual (ECSM) 018.
• 5 years of experience implementing cybersecurity in accordance with DoDI 8500.01, Security Technical Implementation Guide (STIG), Security Content Automation Protocol (SCAP), and Assured Compliance Assessment Solution (ACAS) and cybersecurity solutions.
• 3 years of experience working in a matrix product team environment.
• 3 years of experience developing, managing, and reporting on a Plan of Action and Milestones (POA&M).
• Completion of Marine Corps Cybersecurity Assessment Methodology Course (Must be one of the following: Joint Cybersecurity Assessment, NSA Blue Team Assessment Course, United States Navy Certifier Course, or Marine Corps Cyber Assessment Methodology Course).
• Marine Corps Certification and Accreditation Support Tool (MCCAST) for Validators Training.
• Previously possessed Marine Corps Military Occupational Specialty (MOS) 0689.
• At least one or more of the following commercial Certs: CISSP, GSLC, CASP CE, CISA, CISM is required.

Cask is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender, age, status as a protected veteran, among other things, or status a qualified individual with a disability.

EEO/Employer/Vet/Disabled