Cybersecurity Engineer - Penetration Test Manager

COLSA - Shalimar, FL

Full-time - Mid Level

Shalimar, FL

Professional, Scientific, and Technical Services

About the position

The Team is searching for a cybersecurity professional to support the 48th Cyber Space Test Squadron (48 CTS) at Eglin AFB, Florida. This position will provide direct support to the 48 CTS cybersecurity penetration test planning, execution, and reporting. The 48th CTS conducts early system security analysis and cybersecurity assessments, reviews defined system security requirements, develops appropriate cyber test plans, and executes cyber test assessments for various systems ensuring they are developed, tested, deployed, operated, and maintained according to DoD acquisition and cybersecurity requirements and in accordance with system defined security test procedures outlined in the DoD Cybersecurity Test and Evaluation Guidebook. If you enjoy working in a fast-paced multi-disciplinary environment, learning new technology areas, this is the team for you. The team provides opportunities to advance your cybersecurity career and experience through on-the-job training, hands on testing, self-paced learning, and program and project management by working directly with experienced team members with many years in the cybersecurity field and professional certifications like OSCP, CISSP, CASP, and CEH. If you have a strong technical cyber-background and want to learn more about cybersecurity test and operations to include Cooperative Vulnerability Identification (CVI), Adversarial Cyber Developmental Test (ACD), Cooperative Vulnerability Penetration Assessments (CVPA), and Operational Adversarial Assessments (AA), DoD Risk Management Framework (RMF), Mission Based Cyber Risk Assessments (MBCRA), Cyber Engineering and System Technical Requirements Definitions, Test and Evaluation Master Plans (TEMP), Systems Development, Operational, and Integrated Test (DT, OT, IT) this is the job for you.

Responsibilities

• Development of penetration test plans, cyber requirements/test definitions and MBCRAs
• Management, planning, and direction of CVI, ACD, CVPA, AA penetration test teams
• Management of cyber programs that ensure systems are acquired, tested, operated, and maintained in accordance with security policies and procedures as outlined in the security authorization package and other DoD and Space Force regulations
• Attend required technical and security meetings, training (e.g., operating system, networking, security management) relative to assigned duties
• Ensure all users have the requisite security clearances, authorization, need-to-know, and are aware of their security responsibilities before granting access to the Information System
• Report all security-related incidents
• Conduct periodic reviews of information systems to ensure compliance with the security authorization package
• Serve as member of multiple system security working groups
• Coordinate any changes or modifications to hardware, software, or firmware of a system prior to the change
• Formally notify management when changes occur that might affect system security
• Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly
• Ensure all system security-related documentation is current and accessible to properly authorized individuals
• Ensure audit records are collected, reviewed, and documented (to include any anomalies)

Requirements

• Technical BS Degree and a minimum of 3-7 years of applicable experience, or
• Applicable Associate's Degree and a minimum of 7-11 years of applicable experience, or
• High School Diploma or equivalent and a minimum of 9-15 years of related experience
• Penetration Test Management Experience
• Analytical and problem-solving skills
• Good organization, decision making, and verbal and written communication skills
• Excellent self-initiative and self-motivation with the ability to work under minimal supervision
• Ability to work effectively in small and large team settings to solve complex problems
• Travel up to 12 weeks per year
• US Citizenship: Must be able to obtain at least an interim DoD Secret clearance prior to start date and obtain and maintain a final Top Secret (Single Scope Background Investigation) at the completion of the government process

Nice-to-haves

• Current DoD Top Secret (Single Scope Background Investigation) security clearance
• Knowledge of the Cybersecurity Assess and Authorize (A&A) process through the RMF process
• Background in IT System Administration
• Background with physical, environmental, and personnel security
• Background with auditing information systems
• Background with Security Impact Analysis for Security Related Changes
• Background developing a System Security Plan (SSP)
• Background with Security Incident Handling
• Background with DISA Security Technical Implementation Guide compliance assessment
• Background with TEMP development
• Background with CVI, CVPA, ACD, and AA penetration testing
• Knowledge of the mission and work environments of services activities to tailor security requirements to the needs of the activity and the requirements of DOD, USAF, and SAP security programs
• Knowledge of security equipment and devices for planning and implementing protective methods and security procedures
• Knowledge of administrative procedures associated with classified material and specialized management acquisition and logistics support processes and methods used within DOD, USAF, and other agencies
• Other desirable certifications include but not limited to CEH, OSCP, GPEN penetration test certifications
• Knowledge of Special Access Program (SAP), Sensitive Compartmented information (SCI), collateral and unclassified directives and policies to provide authoritative interpretation and guidance to management officials and other security specialists for resolving issues involving conflicting security requirements
• Understanding of network security/engineering

Benefits

• Medical
• Dental
• Vision
• Life Insurance
• Short-Term Disability
• Long-Term Disability
• Accidental Death & Dismemberment
• Supplemental Income Protection Programs
• 401(k) with company match
• Flexible Spending Accounts
• Employee Assistance Program
• Education & Certification Reimbursement
• Employee Discount Program
• Wellness Program
• Paid Time Off and Holidays