General Summary

The Cybersecurity Engineer II will perform advanced system analysis, design, and implementation with regards to cybersecurity as it applies to a variety of information systems, ranging from stand-alone workstations to fully integrated networked training devices, in accordance with Department of Defense (DoD) regulations and guidance.

Essential Job Functions

• Plans, conducts and supports accreditation efforts for fielded information systems, including training devices.
• Patches and provisions hardened Operating Systems (OS) for fielded and prototype information systems. Ensures that improving system security does not adversely impact functionality and be able to provide technical demonstrations.
• Assists software engineers, field technicians and other teammates in complex troubleshooting. Trains and mentors entry-level cybersecurity engineers.
• Conducts comprehensive security control assessments and produce supporting artifacts such as security test plans and risk assessment reports, architecture analysis reports and other formal technical reports as needed.
• Creates, modifies, and maintains documentation related to the security posture of specialized information systems, including policies and systems architecture.
• Organizes, develops, and briefs technical interchange meetings such as In-Progress Review (IPR) events, recording minutes and specifying Action Items for follow-on tasking.
• Works with the engineering team and management to assure timeline and scope requirements are met.
• Leads RMF and cybersecurity engineering projects with the authority to assign tasking to other engineers.
• Performs installations and security assessments at customer sites, including cleared sites, as well as early testing on pre-release products.
• Contributes to technical proposals in conjunction with the marketing team, assuring they are technically accurate and professionally presented.
• Must be capable of safely handling government-furnished equipment and materials.
• Must be available to work a standard weekly schedule with overtime as required.
• Perform other duties as assigned. 

Knowledge, Skills, and Abilities

• Familiarity with applying DoD Instruction 8510.01 Risk Management Framework (RMF) for DoD Systems, effective July 19, 2022 (or subsequent issuances) to Information Systems (IS).
• Must remain informed of all applicable regulatory guidelines regarding cybersecurity for DoD Information Technology (IT) as published by the National Institute of Standards and Technology (NIST), DoD itself, or by other relevant defense entities.
• Must be knowledgeable of or experienced in acquisition and sustainment procedures for DoD IT as it pertains to contractors, as defined in issuances such as DFARS 252.204-7012, NIST SP 800- 171, NIST 800-53, Cybersecurity Maturity Model Certification (CMMC) and other regulatory publications.
• Must possess experience installing and configuring security settings for Microsoft Windows 10, Red Hat Enterprise Linux 7 (or similar Unix equivalent), or newer OS implementations.
• Must demonstrate advanced OS configuration management techniques including scripting, deployment, and disk imaging/cloning.
• Must possess expertise with computer security software, including whitelisting, anti-virus, file integrity validation and vulnerability assessment & reporting tools.
• Must have excellent reading, writing, presentation and general communication skills.
• Must be able to obtain a security clearance when required by the contract.

Education and Experience

• Bachelor's degree in Computer Science or related technical, or equivalent professional experience. A concentration in Computer Security Administration or related discipline is required.
• Two (2) years of experience in computer security.
• Information Assurance Workforce certification (as described in DoD 8570.01-M or subsequent revision) of IAT-II minimum required.
• Experience in simulation, computer, or systems engineering preferred.
• Position requires eligibility for a security clearance.