Назад
Company hidden
3 дня назад

Information Systems Security Engineer (Cybersecurity)

Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Information Systems Security Engineer (Cybersecurity): Designing, assessing, and maintaining security controls for DoD information systems and AWS cloud environments with an accent on RMF, STIG, IAVA, vulnerability management, and compliance. Focus on validating control effectiveness, supporting ATO activities, analyzing cloud and endpoint risks, and managing security artifacts in eMASS and related GRC tools.

Location: Arlington, VA, United States

Company

hirify.global provides cybersecurity and information security services focused on challenging, mission-impacting projects and continuous professional development.

What you will do

  • Design, implement, monitor, and validate security controls protecting information systems, data, endpoints, and cloud environments.
  • Conduct technical and cloud configuration assessments, identify vulnerabilities and compliance gaps, and recommend remediation.
  • Support RMF lifecycle activities, system authorization and ATO efforts, SSP and IA artifact development, POA&M tracking, and eMASS/GRC tasks.
  • Apply DoD, NIST, DISA STIG, and IAVA requirements to servers, endpoints, and information systems.
  • Manage Tenable Nessus scan policies, credential management, endpoint agents, software licensing, and configuration auditing.
  • Collaborate with ISSOs, system owners, auditors, SMEs, clients, and cross-functional teams; lead technical discussions and communicate risk posture.

Requirements

  • Bachelor’s degree from an accredited university.
  • At least 10 years of cybersecurity or information security experience.
  • Active DoD IAT Level II certification, such as Security+, CySA+, or SSCP.
  • Active Computing Environment certification, such as AWS, Azure, Linux+, or VCP.
  • Active DoD Secret Clearance or eligibility.
  • Strong experience with HBSS or endpoint security platforms, vulnerability assessments, eMASS and GRC tools, incident response, threat analysis, RMF, STIG, IAVA compliance, and cloud security.
  • Solid understanding of cybersecurity principles, malware analysis, network security, cloud security, security operations, networking, system administration, security architecture, cyber risks, and the threat landscape.

Culture & Benefits

  • Continuous learning, professional growth, career advancement, collaboration, and meaningful work.
  • 20 days of PTO, 40 hours of paid sick and safe time, 11 federal holidays, and 2 corporate holidays.
  • Health, vision, dental, and life insurance.
  • 401(k) with tiered matching and 100% vesting.
  • Parental leave for birthing and non-birthing parents.
  • Professional development reimbursement program.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →