Description

You will provide secure software cybersecurity expertise and guide the secure implementation of databases for US Government clients.

Responsibilities

• Evaluate COTS, GOTS, and FOSS software to ensure compliance with security controls and requirements.
• Prepare documentation and bodies of evidence to support assessment and authorization (A&A) activities for sustained ATO.
• Audit security controls and provide technical direction for corrective or mitigation actions.
• Perform and analyze compliance scans, including STIG, SCAP, SCA, and vulnerability scans.
• Review and recommend updates to software development plans to ensure secure coding standards are implemented.

Required Skills

• 5+ years of engineering experience in cyber security.
• Active DOD Secret clearance; US Citizenship required.
• Experience with Risk Management Framework (RMF), NIST 800-37, NIST 800-137, NIST 800-40, NIST 800-53, and CNSSI 1253.
• Hands-on experience with DISA STIGs and Assured Compliance Assessment Solution (ACAS).
• Proficiency in Python coding for automation and security functionality.
• Technical knowledge of Linux environments.
• Experience with SCAP, SCA, and vulnerability scanning.
• DoD 8570.01 IAT-II certification for Linux (e.g., Security+ CE and Linux OS Certification).
• Bachelor's degree in a STEM field.

Preferred Skills

• Experience with CI/CD pipelines and DevSecOps.
• Knowledge of Agile, Scrum, and software life-cycle management.
• Hands-on experience in manual hardening and Linux system administration.

Key Skills

Education

ANY GRADUATE