Назад
Company hidden
8 дней назад

Cybersecurity Engineer Mid - Continuous Monitoring

70 000$
Формат работы
onsite
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Cybersecurity Engineer Mid - Continuous Monitoring (Cybersecurity/RMF): Assessing and monitoring enterprise and system-level security controls for a DoD cybersecurity risk management program with an accent on continuous monitoring, RMF compliance, vulnerability management, and live security reporting. Focus on maintaining ConMon strategies and dashboards, validating controls in eMASS, resolving security data issues, and reporting negative security posture changes within 60 minutes.

Location: Full-time on-site at Ft. Meade, MD; Chambersburg, PA; or Alexandria, VA. US citizenship and an active DoD Top Secret clearance are required.

Salary: $70,000+ annually. Final compensation depends on relevant experience, clearance level, certifications, technical skills, contract requirements, and overall qualifications.

Company

hirify.global provides consulting, technology solutions, and professional services for U.S. government, defense, and intelligence organizations.

What you will do

  • Assess, validate, and continuously monitor enterprise and system-level security controls using Qmulos, Splunk, ACAS, Axonius, CheckMark, BURP, and ESS.
  • Develop and maintain the Continuous Monitoring Strategy and SOP supporting the A&A mission and lifecycle oversight of IT systems.
  • Conduct automated and manual security control assessments and produce weekly status reports using live security-tool data.
  • Ensure ConMon controls are implemented in RMF packages within eMASS and conduct assessments aligned with industry auditor standards.
  • Maintain dashboards tracking compliance, POA&M status, CMRS visibility, asset management, FISMA reviews, annual validations, overdue assessments, and control status.
  • Coordinate with system, ACAS, and HBSS administrators; provide real-time security metrics and notify the Government within 60 minutes of negative security posture changes.

Requirements

  • US citizenship and an active DoD Top Secret clearance must be maintained.
  • Bachelor’s degree in an IT-related field preferred, or equivalent professional experience.
  • DoD 8570 IA Technical (IAT) or IAM Level II certification.
  • Five years of overall experience in cybersecurity, systems engineering, or a similar technical field.
  • Proficiency in one or more of Qmulos, Splunk, ACAS, Axonius, CheckMark, BURP, and HBSS.
  • Understanding of the RMF process, NIST SP 800-37, NIST SP 800-53, and CNSSI 1253.
  • Experience developing, implementing, and conducting a continuous monitoring program for a large organization.
  • Proficiency in security architecture, system hardening, vulnerability management, and intrusion detection or prevention.
  • Strong written and oral presentation skills, customer service skills, and availability for full-time on-site work at one of the specified locations.

Culture & Benefits

  • 26 days of paid leave covering vacation, sick, personal time, and holidays.
  • Performance bonuses based on individual and company-wide results.
  • 401(k) with a 3% company match and immediate vesting.
  • Company-paid life insurance up to $300,000, medical, dental, vision, FSA, and HSA options.
  • 15 days of fully paid parental leave and military differential pay.
  • Paid training and certifications, tuition reimbursement, and professional development support.
  • Employees receive 80% of net proceeds committed by the CEO in the event of a company sale.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →