Cyber Security Engineer

Overview: Join our team supporting the Naval Command & Control (C2) Systems Program Office on a Systems Engineering & Technical Assistance contract. We are looking for a highly skilled Senior Cybersecurity Engineer to manage Risk Management Framework (RMF) Assessment and Authorization (A&A) packages, ensuring compliance with DoD and Navy cybersecurity requirements. This role involves documentation, testing, validation, and continuous monitoring to maintain system security.

Key Responsibilities:

• Prepare and manage comprehensive RMF Assessment and Authorization (A&A) packages, including reviewing and validating documents such as Security Plan (SP), Security Assessment Plan (SAP), Security Assessment Report (SAR), and Plan of Action and Milestones (POA&M).
• Utilize Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs), vulnerability scanners (e.g., Tenable Nessus), and other tools to execute test plans and assessment procedures, advising on discrepancies and performing re-tests as necessary.
• Assess test results post-mitigation to determine system risk, document findings and weaknesses, and outline mitigation measures. Note unmitigated discrepancies, document countermeasures, and create POA&Ms. Document all open / residual risk items in the Risk Assessment Report (RAR).
• Guide Tactical Command & Control systems through RMF Steps 1-5, leading to Authority to Operate (ATO) from Navy Authorizing Official (NAO). Administer system baseline changes through Naval Information Warfare Systems Command (NAVWAR) Baseline Change process.
• Provide RMF Step 6 (Continuous Monitoring) support for systems with a current ATO, conduct annual security reviews to meet Federal Information Security Management Act (FISMA) requirements, and ensure compliance with continuous monitoring protocols.
• Manage and maintain Enterprise Mission Assurance Support Service (eMASS) records for systems, ensuring POA&M milestones are met and documented correctly.
• Act as a SME for program leadership in collaborations and high-risk review boards, representing their systems and providing expert guidance.

Qualifications and Skills:

• Master's degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics with a concentration in computer science or equivalent.
• Minimum 10 years of professional experience with cybersecurity engineering, U.S. Navy RMF process experience preferred.
• Fully Qualified Navy Validator (NQV) certification is required.
• Immediate availability to conduct all required RMF steps to assess and authorize a system, obtaining and maintaining a full ATO.
• Proven experience and skills in the following:
• RMF testing, analysis, and documentation
• Vulnerability risk analysis
• Proficiency with Information Assurance tools and scanners
• Strong understanding of NAVWAR and PEO C4I organizations
• Excellent communication, interpersonal, analytical, and problem-solving skills
• Proficiency in project management tools and methodologies
• Active DoD Secret clearance or higher is required to be considered for this role.

· Must be legally authorized to work in the U.S. without the need for employer sponsorship.

Job Type: Full-time

Pay: $160,000.00 - $190,000.00 per year

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Flexible schedule
• Health insurance
• Life insurance
• Paid time off
• Vision insurance

Compensation Package:

• Employee stock ownership plan
• Yearly bonus

Experience:

• NQV: 1 year (Required)
• Cybersecurity: 5 years (Required)
• Information security: 5 years (Preferred)

Ability to Relocate:

• San Diego, CA 92110: Relocate before starting work (Required)

Work Location: In person