Cyber-Security Engineer

Position Title: Cybersecurity Engineer

Job Overview: We are seeking a highly skilled and experienced Cybersecurity Engineer with a CISSP certification to join our cybersecurity team. The ideal candidate will have a minimum of 5 years of experience in cybersecurity and possess in-depth knowledge of ATO, ConMon, eMass, and POAM processes. This role involves ensuring the security and compliance of our systems and networks, managing risk, and implementing robust security measures.

Key Responsibilities:

1. Security Compliance and Risk Management:
   • Lead the Authorization to Operate (ATO) process, ensuring all systems comply with federal security standards.
   • Manage Continuous Monitoring (ConMon) activities to ensure ongoing compliance and security.
   • Utilize eMass to document and manage security controls and risk assessments.
   • Develop and maintain Plans of Action and Milestones (POAM) to address vulnerabilities and track remediation efforts.

1. Security Operations and Incident Response:
   • Monitor security systems and respond to security incidents and alerts.
   • Conduct security assessments and vulnerability scans to identify potential risks.
   • Implement and manage security controls to protect sensitive information and systems.

1. Documentation and Reporting:
   • Create and maintain comprehensive security documentation, including policies, procedures, and guidelines.
   • Prepare and present security reports to management and stakeholders.
   • Ensure all documentation is kept up-to-date and reflects the current security posture.

1. Collaboration and Training:
   • Work closely with IT and development teams to integrate security into all phases of the system development lifecycle.
   • Provide training and guidance to staff on security best practices and compliance requirements.
   • Collaborate with external auditors and regulatory bodies during security assessments and audits.

Qualifications:

• Education:
  • Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Certifications:
  • Certified Information Systems Security Professional (CISSP) is required.
• Experience:
  • Minimum of 5 years of experience in cybersecurity, with a focus on compliance and risk management.
  • Proven experience with ATO, ConMon, eMass, and POAM processes.
• Technical Skills:
  • In-depth knowledge of cybersecurity frameworks and standards (e.g., NIST, ISO 27001).
  • Proficiency in security tools and technologies (e.g., SIEM, IDS/IPS, SCAPS, STIGs, vulnerability scanners).
  • Strong understanding of network security, encryption, and access control mechanisms.
• Soft Skills:
  • Excellent analytical and problem-solving skills.
  • Strong communication and interpersonal skills.
  • Ability to work independently and as part of a team.

Preferred Qualifications:

• Additional cybersecurity certifications (e.g., CISM, CEH, CompTIA Security ).

Work Location:

• Hybrid with the ability to commute to Orlando, FL 32817