Cyber Security Engineer

BT-370 – Cyber Security Engineer

Herndon, VA

• (fully on-site, no remote option)
• **Please do NOT apply if you do not have an active Poly clearance. Those without a Poly will not be considered.**

Required

Demonstrates experience conducting security assessments, particularly for cloud infrastructure and cloud services.

Demonstrates experience facilitating TEMs with cloud service providers to review cloud service architectures

Demonstrates experience designing, implementing, assessing or reviewing systems that utilize cloud technology with either Amazon Web Services, Oracle Cloud, Google Cloud, or Microsoft Azure cloud architecture.

Demonstrates experience utilizing or reviewing cross domain technology and common architecture designs.

Demonstrates experience with continuous monitoring requirements to include scan analysis for critical or high findings with common scan tools such as Rapid 7, Nessus, and Qualys.

Demonstrates experience monitoring or closing Plan of Action and Milestone items (POA&Ms).

Demonstrates experience utilizing compliance tools to track assessment and authorization activities such as Xacta 360, Risk Vision, RSA Archer.

Demonstrates experience with the common control provider concept within the NIST Risk Management Framework.

Demonstrates experience with security control assessments to include working with SCAs and preparing security packages for SCAs.

Demonstrates experience conducting information system security engineering activities.

Demonstrates project management experience including project planning, task tracking, milestone management, and resource coordination

Demonstrates experience developing and maintaining program metrics, performance indicators, and compliance status dashboards

Demonstrates experience preparing technical reports, program highlights, status briefings, and leadership communications

Desired

Skills and Demonstrates knowledge that are highly desired but not required to perform the work include

• Demonstrates experience using the Sponsor’s or IC element A&A process.
• Demonstrates experience creating or reviewing A&A body of evidence documentation in a cloud security environment.
• Demonstrates experience identifying, implementing, or reviewing appropriate information security controls.
• Demonstrates experience working in Xacta 360