Continuous Monitoring Cyber Security Engineer #3034

Careers

  • Arlington, VA
  • Information Technology
Apply Now

Company Overview

GovCIO is a team of transformers—people who are passionate about transforming government I.T. We believe in making a difference by developing digital strategies and delivering the technology-related innovation governmental operations that improve the citizen experience every day.

But we can’t do it alone. We welcome and nurture an inclusive and diversified work culture. Because different backgrounds, experiences, abilities, and perspectives make us better decision-makers, problem solvers, and creators. We’re changing the face of I.T. – from our diverse staff to the end-products we develop. And we’re excited to expand our team. Are you ready to be a transformer? 

 

Responsibilities

  • Provide cybersecurity continuous monitoring support of the network(s), systems, and users within the DHS IE, using a variety of Government-approved tools (including Archer GRC) and resources (for example, but not limited to the following: Assured Compliance Assessment Solution (ACAS), Nessus, Core Impact, Security Content Automation Protocol (SCAP), Microsoft Vulnerability Manager).
  • Perform pen-testing to identify vulnerabilities in IT systems that pose real-world risk to the client’s systems as a continuous monitoring mechanism, using resources, such as Kali Linux, Metasploit-Pro, Burp-Suit.
  • Track compliance and remediation activities of system owners who have been alerted to actual or potential vulnerabilities in their systems.
  • Collaborate with the client in developing repeatable information assurance and cybersecurity processes and provide engineering assistance to Security Control Assessors in support of Assessment and Authorization efforts.
  • Recommend, install, configure, operate, and maintain client-approved IT security tools and applications to support overall information assurance activities necessary to protect systems in the customer environments.
  • Identify anomalies in the operational environment based on data gathered through continuous monitoring.
  • Provide metrics and track all monitoring efforts on a recurring basis or as requested by the Government.
  • Develop and provide reports regarding continuous monitoring activities.
  • Identify and evaluate opportunities to apply innovative and emerging technologies, automate processes, continually improve the conduct and efficiency of continuous monitoring activities, and identify metrics for monitoring improvements.
  • Upon government approval, implement changes to processes and technologies for improving continuous monitoring, and report metrics in Monthly Status Reports.
  • Automate the generation of CONMON reports using Archer and any other successor A&A/CONMON tools.
  • Strong planning and organizational skills. Detail oriented, decisive and goal oriented to consistently exceed objectives.

 

 

Qualifications

 

  • Bachelor of Science degree in a computer related field with 8+ years (or commensurate experience) 4 years equivalent job experience working in an enterprise infrastructure security and engineering role may be substituted for a degree
  • Minimum of 4 years of security engineer experience.
  • Previous experience (at least 2 years) with performing security engineering in a cloud environment, specifically supporting AWS.
  • Knowledge of IaaS, PaaS and SaaS architectures.
  • Experience with Nessus, Tenable Security Center, and Amazon Cloud.
  • Strong familiarity with NIST 800-53 and FedRAMP requirements.
  • Knowledge of eGRC applications such as RSA Archer, eMass and Exacta.
  • Ability to review and influence new and evolving design, architecture, standards, and methods for security infrastructures, vulnerabilities and networking at scale.

 

 

 

 

 

 

 

 

 

 

COVID Policy: New employees will be required to adhere to the Company’s and its clients’ COVID-19 safety procedures. In the event that the COVID-19 vaccination mandate for Federal Contractors is enforced, you must become fully vaccinated or request and be approved for an exemption. Employees working onsite at a client location must comply with our client’s COVID-19 requirements.

GovCIO is a team of professionals who want to make a difference. And that can only happen with a diverse, happy, and cared-for team. So, we prioritize your well-being, equity for all and look for ways to make work a better place for each of us every day.

We are an Equal Opportunity Employer. All qualified applicants receive consideration for employment without regard to race, ethnicity, religious affiliation, gender, gender identity or expression, sexual orientation, national origin, or disability status.

Apply Now

Not The Right Fit?

Is this not the job you’re looking for? That’s ok! We’ve got plenty of other opportunities for you to peruse. Search all of our open positions by your area of interest or location.

View All Jobs