Cybersecurity Engineer/ISSE - 26-006 - remote at AUSGAR Technologies Inc

San Diego, California, United States -

Full Time

Start Date

Immediate

Expiry Date

10 Jun, 26

Salary

115000.0

Posted On

12 Mar, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cybersecurity Engineering, Risk Management Framework, RMF Assessment, Authorization to Operate, Vulnerability Assessment, SCAPs, ACAS, NESSUS, STIGs, SRGs, eMASS, POA&Ms, Continuous Security Monitoring, Windows OS, RHEL OS, Network Devices

Industry

Information Technology & Services

Description

Description MUST POSSESS AN ACTIVE SECRET CLEARANCE TO BE CONSIDERED. WE USE E-VERIFY TO ELECTRONICALLY CONFIRM THE EMPLOYMENT ELIGIBILITY OF NEWLY HIRED EMPLOYEES. COMPETITIVE SALARY, COMPREHENSIVE BENEFITS AND A COMPANY THAT CARES! AUSGAR Technologies, Inc., an equal opportunity employer, is an established, Service-Disabled Veteran-Owned Small Business (SDVOSB) Department of Defense, government contractor with core competencies in Information Assurance, Cybersecurity and Systems Engineering. With offices on both the East and West coasts, an inviting culture and above-standard benefits, opportunity abounds for the right individual! Cybersecurity Engineer/ISSE – 26-006 – San Diego, CA As a growing Department of Defense Contractor, AUSGAR Technologies has an exciting opportunity for a Cybersecurity Engineer/ISSE to join our team of smart and innovative technical team members. Provide Cybersecurity Engineering and Risk Management Framework (RMF) support for PEO-Digital. Play a critical role in supporting the RMF Assessment and Authorization (A&A) processes for PEO-Digital. Responsible for the technical implementation of the RMF. Conduct cybersecurity and risk assessments on networks, systems and applications to identify and mitigate technical and non-technical vulnerabilities. Handle multiple RMF authorization types, including baseline changes, use cases, Assessment Summary Results (ASR), Authorization to Operate (ATO), CAR, Denial of Authorization to Operate (DATO) & HRR/HR. Conduct vulnerability assessment and analysis utilizing standard technologies, such as Security Content Automation Protocols (SCAPs), Assured Compliance Assessment Solution (ACAS)/NESSUS scans and DISA Security Technical Implementation Guides (STIGs)/ Security Requirements Guides (SRGs). Conduct security assessments and create RMF documentation, including Security Assessment Plans (SAPs), eMASS Security Risk Assessment (SARs), Special Access Programs (SAPs) Executive Summary, SAPs Body of Evidence (BOE). Provide accurate assessments and document security posture, capabilities and vulnerabilities. Lead the creation of the SAPs and SARs and convey technical findings and risk assessments. Perform detailed risk analysis, identify system vulnerabilities and provide comprehensive recommendations for risk mitigation. Verify, validate and document risk, perform Security Control Assessments (SCAs) and document compliant and failed security controls in eMASS. Assess STIGs and SRGs. Ensure traceability of all vulnerabilities from raw assessment results to the Plan of Action and Milestones (POA&Ms). Support the Continuous Security Monitoring (CSM) program as necessary. Requirements The physical demands and work environment described here are representative of those that must be met by an employee to successfully perform the essential functions of the job. Reasonable accommodation may be made for individuals with disabilities to perform the essential functions. Active Secret clearance required. Security+ CE is required, CISSP is desired. Bachelor’s degree in Information Technology or related field or business-related field Desired: Advanced degree in Information Technology or related field or business or related field Minimum of 5 -7 years of experience in cybersecurity risk assessment and supporting RMF A&A processes for DoD and Navy systems. Hands-on experience conducting vulnerability assessment and analysis utilizing standard technologies, such as SCAPs, ACAS/NESSUS scans, and DISA STIGs/SRGs Experience developing mitigations and writing mitigation statements for ongoing vulnerabilities. Experience using eMASS. Experience working in Navy environments. Experience with wireless networks technology. Experience with Visio required. Ability to author and maintain policy documents in support of RMF and Vulnerability Management. Good working knowledge of Windows and RHEL OS, layer 2 and 3 network devices and supporting infrastructure. Analytical skills to troubleshoot high-level, complex, technical problems. Employ strong written and verbal communication skills to advise various levels of technology stakeholders, program initiatives and accrediting authorities on security requirements and Cybersecurity trends and solutions to include risk assessments and mitigations. Some travel up to 10%. Remote position, but will require going onto the government site a minimum of one day per week or as required. Salary Range: $100-115K Based on your qualifications, you will be placed in Level I-V. An essential qualification for this position is successfully obtaining a security clearance issued by the Federal Government, which may require successful completion of a background check. We use E-Verify to electronically confirm the employment eligibility of newly hired employees. AUSGAR’s salary range is dependent upon a variety of factors, which include experience, skills, education, certifications and geographical location. Our salary range includes a base salary and excellent benefits package as part of our total compensation. AUSGAR Technologies, Inc. is an equal opportunity employer. If you are a qualified individual with a disability or a disabled veteran and need assistance in completing the application, you have the right to request reasonable accommodation. Please e-mail us at jobs@ausgar.com if you are unable or limited in your ability to use or access www.ausgar.com careers page as a result of your disability.

Responsibilities

The role involves providing Cybersecurity Engineering and Risk Management Framework (RMF) support, playing a critical part in the RMF Assessment and Authorization (A&A) processes for PEO-Digital. Responsibilities include conducting cybersecurity and risk assessments on various assets to identify and mitigate vulnerabilities, handling multiple RMF authorization types, and creating necessary RMF documentation.