Apply on Employer Site

Leading Path Consulting · 9 hours ago

TS/CSI w/Poly Cybersecurity Project Engineer (A&A/ATO/ISSO)

McLean, Virginia, United States

Full-time

Onsite

Mid Level

Leading Path Consulting is seeking a Cybersecurity Project Engineer to provide support for cyber security compliance and the Assessment and Authorization process. The role involves designing secure systems, conducting risk assessments, and ensuring compliance with security requirements throughout the project lifecycle.

ConsultingInformation ServicesInformation Technology

Comp. & Benefits

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

The Contractor shall work with technical team to design, develop, test, and implement new networks and network architecture using current technology, to include authorization and accreditation

The Contractor shall work with the technical team to complete requirements to obtain all required approvals and maintain compliance throughout the full lifecycle of the A&A process

The Contractor shall work with the Sponsor and users to identify and develop system requirements taking into account the desired results, hardware limitations and operating requirements, identified by the Sponsor

The Contractor shall work with technical team to provide operational testing and recommendations for continuous improvement of equipment and software in support of Sponsor’s goals and objectives

The Contractor shall work with the technical team to coordinate across the Sponsor’s organization and business partners to expedite operational approvals

The Contractor shall analyze new technologies, hardware, and software to determine the applicability and need for the existing or proposed system, to include security, storage, and network technology

The Contractor shall ensure compliance with the Sponsor's security requirements, incl. those related to data protection, access control, and incident response

The Contractor shall develop and assist with implementing security controls to protect Sponsor systems and data, including firewalls, multi-factor authentication, and encryption

The Contractor shall work with the technical team to conduct internal risk assessments to identify potential security risks and develop mitigation strategies to address them

The Contractor shall prepare and maintain security documentation, incl. System Security Plans, Security Assessment Reports, and Plans of Action and Milestones

The Contractor shall coordinate with the Sponsor's security team to ensure projects meet the Sponsor's security requirements and to address any security-related issues

The Contractor shall implement the Sponsor's A&A process, including preparing and submitting required documentation and leading the team in A&A meetings and reviews

The Contractor shall ensure projects comply with relevant regulations and standards, including those related to data protection and cyber security, such as Defense Information Systems Agency Security Technical Implementation Guides (DISA, STIGs)

The Contractor shall develop and maintain an incident response plan to respond to security incidents, including data breaches and system compromises

The Contractor shall conduct security testing and validation to ensure Sponsor systems and data are secure, including vulnerability scanning and systems hardening

The Contractor shall maintain compliance with the Sponsor's continuous monitoring requirements

The Contractor shall support technical exchange meetings on business and technical requirements

Qualification

Cybersecurity complianceRisk assessmentsSecurity controls implementationA&A process navigationNetwork architecture designIncident response planningVulnerability scanningContinuous improvementTeam collaborationTechnical documentation

Required

Active TS/SCI with Full Scope Poly clearance

Deep understanding of the Sponsor's security requirements

Ability to navigate the various stages of the A&A process

Experience in designing, developing, testing, and implementing new networks and network architecture

Experience in obtaining approvals and maintaining compliance throughout the full lifecycle of the A&A process

Ability to identify and develop system requirements considering hardware limitations and operating requirements

Experience in providing operational testing and recommendations for continuous improvement of equipment and software

Ability to analyze new technologies, hardware, and software for applicability and need

Experience in ensuring compliance with security requirements related to data protection, access control, and incident response

Experience in developing and implementing security controls such as firewalls, multi-factor authentication, and encryption

Experience in conducting internal risk assessments and developing mitigation strategies

Experience in preparing and maintaining security documentation including System Security Plans, Security Assessment Reports, and Plans of Action and Milestones

Experience in coordinating with security teams to meet security requirements

Experience in implementing the A&A process and preparing required documentation

Knowledge of relevant regulations and standards related to data protection and cyber security, such as DISA STIGs

Experience in developing and maintaining an incident response plan

Experience in conducting security testing and validation including vulnerability scanning and systems hardening

Ability to maintain compliance with continuous monitoring requirements

Experience in supporting technical exchange meetings on business and technical requirements