Who we are:

ShorePoint is a fast-growing, industry recognized, and award-winning cybersecurity services firm with a focus on high-profile, high-threat, private and public-sector customers who demand experience and proven security models to protect their data. ShorePoint subscribes to a “work hard, play hard” mentality and celebrates individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers. We are equally passionate about an environment that supports creativity, accountability, diversity, inclusion, and a focus on giving back to our community.

The perks:

As recognized members of the Cyber Elite, we work together in partnership to defend our nation’s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, including major carriers for health care providers. Highlighted benefits offered: 18 days of PTO, 11 holidays, 80% of insurance premium covered, 401k, continued education, certification maintenance and reimbursement, etc.

Who we’re looking for:

We are seeking a Information Security Engineer who has experience providing support in a dynamic, fast-paced environment within the public sector. The Information Security Engineer will support the growth of a newly awarded program. This is a unique opportunity to join an exciting company where you will have a voice and be an active participant in driving growth and shaping our companies’ culture.

What you’ll be doing:

• Provide information security expertise to system development teams
• Manage the overall cybersecurity of the ICAM Solution and ensure that identified security vulnerabilities, policy, and mandate deviations are documented, reported, tracked, and remediated on a POA&M
• Follow the guidance in the Department’s Common Controls Catalog and the current version of NIST SP 800-53 and NIST SP 800-63

• Review information system documentation and the information system itself at least monthly
• Update documentation for the information system as required in the selected central cybersecurity repository
• Ensure system weaknesses are captured in the POA&Ms
• Ensure security plans and authorization documentation for provided system(s), service(s), and network(s) are developed and kept current

What you need to know:

• Experience with cybersecurity repository tools (CSAM, Xacta, etc)
• Experience with Authority to Operate (ATO) process, continuous monitoring, POA&Ms, Security Authorizations (SA), NIST 800-37, NIST 800-53 Rev3 / Rev4, working with System Owners (SO)

• Experience with the C&A process
• Understanding of FISMA compliance

Must have’s:

• Eligibility to obtain and maintain customer required security clearance
• Bachelor’s degree in related field or equivalent experience 

• 5-7 years applicable professional experience

Beneficial to have the following:

• Cybersecurity related certifications: CISSP, CAP, CASP, CISM, etc

Where it’s done:

• Herndon, VA (Remote)