Zero Trust Cyber Security Engineer

Millennium Corporation - Charleston, SC

Full-time - Mid Level

Charleston, SC

251-500 employees

Personal and Laundry Services

About the position

The Zero Trust Cyber Security Engineer at Millennium Corporation is responsible for enhancing cybersecurity measures through penetration testing, vulnerability assessments, and the implementation of security configurations in compliance with DoD standards. This role requires collaboration with various programs to ensure alignment with Zero Trust policies and the development of necessary cybersecurity documentation.

Responsibilities

• Perform penetration tests and vulnerability assessments using approved DoD vulnerability scanners and security tools.
• Implement security configurations for operating systems and network devices according to DISA guidelines.
• Conduct cybersecurity assessments, security audits, and risk analyses.
• Develop and update Program Protection Plans and Cybersecurity Strategies.
• Ensure security provisions in system acquisition documents meet identified needs.
• Create mitigation strategies for DoD information systems.
• Prepare RMF artifacts and Memoranda of Agreement with system owners.
• Develop cybersecurity-related acquisition documents.
• Identify Common Criteria and NIAP certified technologies.
• Evaluate cybersecurity products for compliance with DoD/DoN requirements.
• Participate in FLTCYBERCOM Designated Accrediting Authority collaboration calls.
• Provide expert security engineering support related to Zero Trust on DoN Business Systems.
• Conduct initial baseline assessments of programs under PMW 240 and identify gaps.
• Work with PMW 240 programs to demonstrate alignment through metric reporting and investment identification in ZT capabilities.
• Assist in developing security requirements and specifications for RMF artifacts.

Requirements

• Active secret clearance is required.
• Bachelor's degree with 8 years of engineering, computer science, or IT experience, including 3-6 years of cybersecurity experience, or a high school diploma with 13 years of experience.
• Experience with DoD Risk Management Framework (RMF) and DoDI 8510.01.
• Possess DoD approved Baseline Certification as Information Assurance Manager, Level II (e.g., CISSP, GLSC, CISM).
• Familiarity with RMF gained through training or experience with DoD Assessment & Authorization (A&A).
• Proficiency in Zero Trust and DevSecOps.

Nice-to-haves

• Experience in business development activities related to technical documentation and proposal writing.