Senior Cybersecurity Engineer

Gray Analytics was founded in 2018 with a vision to bring innovative and creative solutions in the cybersecurity, IT, engineering, and scientific spheres. Our customers span across the commercial and federal domains with our goal being to bring excellent customer service to our clients and employees.

Without the bureaucracy that often exists in larger corporations, Gray Analytics offers increased work flexibility, visibility in company progress, and greater opportunities for advancement. It's with our employees' support that we can help our clients achieve mission and operational success.

At Gray Analytics, our goal is simple: to help our country, its businesses, and its organizations improve security in the Cyber realm. Period.

Position: Senior Cybersecurity Engineer

Location: Huntsville, AL (Redstone Arsenal)

Schedule: Full-Time/Exempt

Position Description:

Gray Analytics is seeking a Senior Cybersecurity Engineer to join a diverse, highly-skilled team to create unique solutions for complex problems. The Senior Cybersecurity Engineer will be a key member of a team performing Foreign Military Sales (FMS) Equipment and Software Cybersecurity Systems Engineering along with key functions supporting the Risk Management Framework (RMF) Assessment and Authorization (A&A) process for tactical systems. The candidate will also have a background in Agile and Model Based Systems Engineering (MBSE).

The candidate will have the following responsibilities:

• Provide accurate technical evaluations of the FMS equipment, software applications, full system, or network and documenting the security posture, capabilities, and vulnerabilities against applicable NIST controls.
• Will be responsible for Confluence and Jira updates regarding the Poland Phase 2 project and additional projects after completion.
• Ability to design, interpret, and build models within MagicDraw.
• Selecting and implementing security controls, timely completion of accreditation packages, formulating and implementing mitigations and maintaining the security posture of systems.
• Identify, assess and mitigate system security threats/risks throughout a system's lifecycle, validate system security requirements, formulate and maintain documentation and system certification and accreditation activities (planning, testing, assessing and coordinating).
• Documenting preliminary or residual security risks for system operation & manage and approve Authorization Packages.
• Monitoring and evaluating a system's compliance with Department of Defense (DoD) security, resilience, and dependability requirements including performing validation steps, comparing actual results with expected results and analyze the differences to identify impact and risks at the software application, system, and network levels.
• Work with team to provide solutions and to ensure continued functionality of systems within DoD RMF Framework

Basic Qualifications:

• Bachelor's Degree (engineering or another technical discipline)
• 10 yrs of experience in Cybersecurity Domain
• Experience with implementing and evaluating DoD STIG requirements, NIST RMF, IAVMs and Cybersecurity assessment tools (ACAS, Nessus, SCC, STIG Viewer)
• Experience with cryptographic technologies
• Knowledge of the Risk Management Framework (RMF) process and NIST security controls
• Experience with Confluence and Jira.
• Experience with MBSE tools (MagicDraw)
• Knowledge of information system architecture and standards as they apply to cyber security
• Sec or higher certification
• Ability to travel. Travel will be estimated around than 25% per year.

Other Qualifications:

• Master's Degree preferred
• Experience in a DoD security environment preferred
• Candidate should have strong communication and writing skills; be able to work in a team-oriented environment supporting a diverse customer base comprised of program managers, engineers, analysts, specialists, and technicians; and strong attention to detail.

Security Requirements:

Candidate must be a US Citizen and possess (and be able to maintain) a Final Secret Clearance or meet the eligibility to obtain (and maintain) a Secret Clearance.

About Gray Analytics

Gray Analytics values our employees as our most important resource. To showcase these values, we offer not only traditional medical, disability, life, etc. coverages that begin on day one of employment, but also unique benefits to improve our employees' quality of life. Some of these unique benefits include:

• A PTO policy based on total years of experience, not years of service to the company. PTO is available for use immediately at hire, subject to company needs.
• Eligibility for 401K contributions and company matching, Pet Insurance through Spot, Flexible Spending Account, and Tuition and Professional Development Funds begin on day one of employment.
• Charitable donations program on a yearly and quarterly basis where employees can nominate a non-profit of choice to receive donations.

Gray Analytics is an Equal Opportunity Employer and VEVRAA Federal Contractor. This contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a) and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on their race, color, religion, sex, gender identity, sexual orientation, or national origin. Moreover, these regulations require that covered prime contractors and subcontractors take affirmative action to employ and advance in employment individuals without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, protected veteran status or disability. Gray Analytics, Inc. welcomes minority and veteran applicants.