Senior Cybersecurity Engineer

Job Title: Senior Cybersecurity Engineer

Responsibilities of the Senior Cybersecurity Engineer
EDC Consulting LLC (EDC) is seeking candidates for a Senior Cybersecurity Engineersupporting the U.S. Army.

The Cybersecurity Engineer will:

• Serve as the overall subject matter expert on Cybersecurity engineering technology and market capabilities/trends.
• Conduct security scans on the organization's cloud-deployed infrastructure, produce and interpret compliance reports using the Army's Assured Compliance Assessment Solution (ACAS).
• Validate technical security controls for operating systems, applications, and network appliances, recommending enhancements.
• Review proposed configuration changes for security impact.
• Operate endpoint-protection mechanisms, including high-level reporting and day-to-day administration activities.
• Collaborate with technical and policy teams to implement, maintain, and monitor technical security configuration controls (STIGs, SRGs, and industry security hardening guidance).
• Implement and manage requirements for maintaining cloud P-ATO, ATO, and security control inheritance capabilities.
• Collaborate with internal and external parties to transform high-level technical objectives into comprehensive technical requirements.
• Utilize results of vulnerability scans to determine vulnerabilities and develop operational plans for remediation or mitigation.
• Install, operate, and maintain the Army Endpoint Security System.
• Manage Cybersecurity training and certification program using the Army Training and Certification Tracking System.
• Assist hosted customers in obtaining and maintaining RMF and other certifications.
• Review and document change requests, determining approval or denial.
• Update artifacts of the RMF, including system diagrams, Hardware/Software/Firmware Inventory, Interface & Ports, Protocols and Services listing, etc.
• Regularly interact with the Army CSSP, C5ISR, and customer ISSOs/ISSMs.

Qualifications:

• Bachelor's Degree with 12+ years of hands-on experience or Master's Degree with 10+ years of hands-on experience.
• Mid to Senior level Cybersecurity Technical Administrator experience in a cloud environment.
• Strong verbal and written communication skills.
• Understanding of DOD Risk Management Framework Assessment & Authorization (RMF A&A), FedRAMP, the DOD cloud provisional authorization (PA) process, and processes to acquire and maintain an Authorization to Operate (ATO).
• Experience automating routine administrative tasks desired.
• Understanding of network, storage, server, and application technologies.
• Strong understanding of common cyber threat patterns, indicators of compromise, and defenses.
• Working knowledge of DoD STIGs and IA Vulnerability Management (IAVM).
• CompTIA Security+ Certified
• Active Security Clearance