Cyber Security Engineer

Simulation Technologies - Huntsville, AL

Full-time - Mid Level

Huntsville, AL

11-50 employees

Machinery Manufacturing

About the position

SimTech, Inc. is seeking a Cyber Security Engineer to join their team in Huntsville, AL. This role involves supporting the Missile Defense Agency's Engineering Directorate Modeling & Simulation office, focusing on risk management and compliance with DoD security requirements. The position offers opportunities for growth and professional development in a dynamic and diverse environment.

Responsibilities

• Perform technical work utilizing the Risk Management Framework (RMF) process to analyze and solve Information Assurance (IA)-related technical problems.
• Utilize best practices for monitoring, auditing, and measuring risk, compliance, and assurance efforts.
• Ensure compliance with DoD security, resilience, and dependability requirements at software application, system, and network levels.
• Document preliminary or residual security risks for system operation.
• Verify that software application/network/system authorization and assurance documentation is current.
• Monitor and evaluate system compliance with DoD security requirements, performing validation steps and analyzing results to identify risks.
• Provide technical evaluations of software applications, systems, or networks, documenting security posture and vulnerabilities against NIST controls.
• Recommend new or revised security measures based on risk analysis and verify implementation of security postures, documenting deviations and recommending corrective actions.
• Operate DOD tools and security monitoring solutions, utilizing COTS products like Elastic Endpoint Security Solutions (ESS).
• Conduct regular audits to ensure secure operation of systems and compliance with security policies and procedures.
• Perform annual inspections to validate system updates and configuration compliance, involving approximately 10% travel.
• Collect data, document, and report on all responsibilities as required.

Requirements

• Bachelor's degree in computer science or a related field, or equivalent experience.
• Compliance with DoD 8570 Information Assurance Technical (IAT) level III or Information Assurance Management (IAM) Level III Certification upon employment (e.g., CISSP, CISM).
• Experience with Red Hat Enterprise Linux operating systems.
• Working knowledge of DoD security policies and procedures.
• Effective oral and written communication skills.
• Understanding of Enterprise Mission Assurance Support Service (eMASS), Security Technical Implementation Guides (STIG's), IAVAs, and DoD information assurance applications.

Nice-to-haves

• Knowledge of ACAS, NESSUS, Elastic, SCAP, POA&Ms, NIST, NISPOM, system audits, vulnerability scanning, and RMF package development.
• Linux certification (e.g., Linux+, LPIC, RHCSA, RHCE).
• Previous experience with Missile Defense Agency elements or equivalent system environments.

Benefits

• Comprehensive compensation package
• Professional development opportunities
• Flexible work environment
• Health insurance
• Paid time off