Overview

Join Our Stellar Team at Castalia Systems!

Are you ready to skyrocket your career with us? We're on the lookout for ambitious individuals who are eager to make their mark in a diverse and thriving environment.

At Castalia Systems, we're not just another company – we're a certified Woman Owned Small Business (WOSB) and Small Disadvantage Business (SDB) committed to excellence since 2011. Join us in delivering top-tier solutions to the dynamic Defense and Intelligence sector.

As valued members of our team, we prioritize your well-being. Enjoy a comprehensive benefits package, including medical, dental, and vision coverage, 401k matching, generous PTO, paid holidays, professional training opportunities, and even pet insurance to ensure your furry friends are cared for too.

Responsibilities

Castalia Systems is seeking a Senior Cybersecurity Engineer in the Dulles, VA area.

A Senior Cybersecurity Engineer (CSE) with DevSecOps experience will support the identify, implement, and document as well as support the deployment of advanced cybersecurity capabilities for a U.S. Government customer on a large mission critical development and sustainment program that will design, build, deliver, and operate a network operations environment, including introducing new cyber capabilities to address emerging threats.

This role will support Authorization and Accreditation (A&A) efforts through cyber risk assessment, policy analysis, National Institute of Standards and Technology (NIST) security control validation and DHS 4300A system requirements. Also, the ideal candidate will provide expertise through recommendations associated with cybersecurity security test and evaluation, system vulnerability and compliance in support of Authorization and Accreditation (A&A) as well as continuous monitoring throughout the System Development Life Cycle within our digital environment e.g. Azure, AWS.

A qualified candidate will perform the following duties and responsibilities, but are not limited to:

• Identify security requirements for system.
• Ensure security requirements are planned, implemented, and tested; Support vulnerability testing of all code before submitting to Security, Testing and Evaluation (ST&E).
• Responsible for reviewing and commenting on security risks and security issues related to any Change Requests, Infrastructure Change Requests and Configuration Change Requests.
• Responsible for reviewing Port Open Requests (PORs).
• Review and input into the CONOPS.
• Work with the ISSOs to gather security controls and documents to include writing and management update with subject matter experts.
• Responsible for any technical insertions.
• Responsible for reviewing and tracking POA&Ms.
• Pre-ST&E testing when able/applicable.
• Work with the ST&E team to ensure testing target is accessible and ready (Checklist and regular meetings).
• Work with ISSO, ISSE, and Security Control Accessors (SCA) to verify security approach in support of an ATO/ATP decision.
• Work with the vulnerability management team to access and test the target (app/system).
• Work with the team to ensure the compliance and vulnerability findings are remediated, (or mitigated.
• Monitor IAVM notifications from multiple channels and ensure actions for relevant issues are planned and implemented.
• Take action to ensure the security of the development environment.

Qualifications

Security Clearance Requirement:

• Active/current Secret clearance minimum with the ability to obtain/maintain a TS/SCI is required. Must also be able to obtain a DHS Suitability.

Required Qualifications:

• Bachelor’s degree in Cyber Security, Information Security, Software Engineering or a related discipline is required. 10 years of experience (for a total of 18 years) may be substituted for a degree.
• 8 years of directly relevant cyber security engineering experience.
• 2 years’ experience with Agile software development programs.
• Experience in intrusion detection and prevention systems (IDS/IPS), log analysis, malware analysis, network traffic flow and packet analysis.
• Experience with standard security principles, policies, and industry best practices.
• Practical experience hardening IT systems in compliance with STE/STIG guidelines.
• Experience and knowledge of networking (TCP/IP, topology, sockets and security), operating systems (Windows/UNIX/Linux), and web technologies (Internet security).
• Certified Information Systems Security Professional (CISSP) certification.
• DoD 8570 IAM Level II certification.

Preferred Qualifications:

• Certified Ethical Hacker (CEH) certification.
• Understanding of security technologies and concepts, experience in design and implementation of secure network solutions including DMZs and web portals.
• Knowledge of Information Assurance and Information Operations technologies and development activities.
• Understanding of the processes and guidelines for Authorizing & Accrediting (DCID, ICD, NIST 800-53, SANS 20) information systems based upon experience on a large-scale development program.
• Possesses or quickly develop a comprehensive understanding of Government Information Security policies, regulations, and guidelines.

Castalia Systems is an equal employment opportunity and affirmative action employer and strives to comply with all applicable laws prohibiting discrimination based on race, color, creed, sex, sexual orientation, age, national origin, or ancestry, physical or mental disability, veteran status, marital status, HIV-positive status, as well as any other category protected by federal, state, or local laws. All such discrimination is unlawful, and all persons involved in the operations of the company are prohibited from engaging in this type of conduct.