Cyber Security Engineer

$58,000 - $126,000/Yr

Simtech. Co.Ltd - Huntsville, AL

Full-time

Onsite - Huntsville, AL

Transportation Equipment Manufacturing

About the position

SimTech, Inc. is seeking a Cyber Security Engineer to join their team in Huntsville, AL. This role involves supporting the Missile Defense Agency's Engineering Directorate Modeling & Simulation office, focusing on risk management and compliance within cybersecurity. The position offers opportunities for growth and professional development in a dynamic work environment.

Responsibilities

• Perform technical work utilizing the Risk Management Framework (RMF) process to analyze and solve Information Assurance (IA)-related technical problems.
• Utilize best practices for monitoring, auditing, and measuring risk, compliance, and assurance efforts.
• Ensure compliance with Department of Defense (DoD) security, resilience, and dependability requirements at various levels.
• Document preliminary or residual security risks for system operation.
• Verify that authorization and assurance documentation for software applications and systems is current.
• Monitor and evaluate system compliance with DoD security requirements, performing validation steps and analyzing results to identify risks.
• Provide technical evaluations of software applications, systems, or networks, documenting security posture and vulnerabilities against NIST controls.
• Recommend new or revised security measures based on risk analysis and verify implementation of security postures.
• Operate DOD tools and security monitoring solutions, conducting regular audits to ensure secure operations and compliance with security policies.
• Conduct annual inspections to validate system updates and configuration compliance, including technical scans and physical observations, with approximately 10% travel.
• Collect data, document, and report on responsibilities as required.

Requirements

• Bachelor's degree in computer science or a related field, or equivalent experience.
• Compliance with DoD 8570 Information Assurance Technical (IAT) level III or Information Assurance Management (IAM) Level III Certification upon employment (e.g., CISSP, CISM).
• Experience with Red Hat Enterprise Linux operating systems.
• Working knowledge of DoD security policies and procedures.
• Effective oral and written communication skills for teamwork.
• Understanding of Enterprise Mission Assurance Support Service (eMASS), Security Technical Implementation Guides (STIG's), and DoD information assurance applications.

Nice-to-haves

• Knowledge of ACAS, NESSUS, Elastic, SCAP, POA&Ms, NIST, NISPOM, system audits, vulnerability scanning, and RMF package development.
• Support stakeholders in the operation of the Elastic platform.
• Linux certification (e.g., Linux+, LPIC, RHCSA, RHCE).
• Previous experience with Missile Defense Agency elements or equivalent systems.

Benefits

• Comprehensive compensation and benefit package.
• Opportunities for growth and professional development.