Cyber Security Engineer

The Mission Essential Group, LLC (MEG) is a premier service provider of information management solutions for complex, mission-critical needs. MEG has earned a reputation as an innovator and pioneer. Headquartered in Fairfax, VA, MEG employs professionals in offices located throughout the United States and around the world. MEG offers a competitive benefits package including a competitive salary; medical, dental, vision, life and disability insurance; paid time off; and retirement benefits. MEG is a leading provider of Information Management system engineering, software development, information assurance, system sustainment and is the primary provider of technical support for the Integrated Broadcast Service (IBS) Enterprise. IBS is the worldwide Department of Defense (DoD) joint program for transporting intelligence, surveillance & reconnaissance (ISR) and targeting data to all levels of tactical and strategic operational users. IBS provides global, 24/7, dissemination of time sensitive Indications & Warning and Force Protection data to Joint Warfighters and Collaborating Nation partners conducting military operations around the world. MEG serves a vital role in supporting the IBS Enterprise, providing continuity in skills crucial to support military operations. MEG integrates the talents and skills of team members to form an IBS Enterprise Support Services Team to provide world-class IBS customer support. MEG provides innovative software tools, technical services, and rapid development of solutions to support end user requirements. As such our systems and products require are high level of quality and configuration management to ensure they meet and/or exceed customer expectations. The Cyber Security Engineer is a hands-on position that requires an advanced knowledge of information assurance principles and regulatory guidance to develop, certify, accredit, and maintain information systems that are integral to our customers, our business, and the success of our security program. The position is located at the company Headquarters in Fairfax, VA. Duties and Responsibilities: *Provide support in all aspects of the Assessment and Authorization (A&A) process for various information systems *Verify any changes that may impact the security posture or authorization status of the information system are conveyed to program stakeholders *Serve as the liaison between the system owner and other information system stakeholders *Ensure the day-to-day implementation, oversight, continuous monitoring, and security for multiple information systems *Lead and facilitate meetings with subject matter experts to identify, develop, document, and validate requirements *Able to independently execute each step within the Risk Management Framework *Conduct vulnerability scans utilizing solutions such as SCAP and NESSUS *Develop, maintain, and review information system security documentation *Validate security policies and procedures outlined in the System Security Plan (SSP) *Confirm applicable security controls are enforced and functional throughout the information system lifecycle *Ensure proper Protection and/or Corrective Measures have been taken when an Incident or Vulnerability has been discovered *Perform Risk Assessments *Install hardware and software as required *Install security patches and updates to information systems *Conducts investigations and develops investigative reports when needed *Research new technology and stays current with regulatory updates and releases Other Notes: *Position is required to work onsite Fairfax, VA location *Dress code is business casual Qualifications: *Requires an Active Top-Secret Clearance with SCI Eligibility *Ability to maintain a US Government security clearance *Bachelor's degree in computer science, a related field, or equivalent experience *Minimum of Five (5) years of Cyber Security experience *Minimum of Three (3) years of SP 800-37 Rev 2, NIST Risk Management Framework (RMF) experience *Working knowledge of Information Security governing regulations (NIST 800-60, CNSSI 1253, NIST 800-53, and DAAPM) *Experience managing a SIPRNet connection *Extensive knowledge and administration of Windows based environments *Practical knowledge of security technologies (encryption, data protection, privileged access) *CompTIA Security+ Certified

Created: 2024-11-05