Cybersecurity Engineer - ISSO

LaunchTech•Colorado Springs, CO

3d•Onsite

About The Position

LaunchTech is a veteran-owned company that prides itself on delivering service before self and excellence in all we do. We are seeking dynamic professionals who embody our core values of Integrity, Commitment, and Excellence to join our growing Crew in support of our customers across the federal, state, and commercial markets. We are seeking a Cybersecurity Engineer – ISSO to join our team in support of the Missile Defense Agency (MDA), responsible for maintaining system authorization, implementing security controls, and ensuring continuous compliance with DoD cybersecurity requirements.

Requirements

Must have 4 years of general (full-time) work experience
May be reduced with completion of advanced education
Must have 2 years of cybersecurity experience
Must have a high level of understanding of computer systems, operating systems, and network architecture
Must have a strong working knowledge of Microsoft Office Suite
Must have experience with Configuration Management processes and workflows
Must have a current DoD 8570 IAT Level II certification (e.g., Security+)
Must have an active DoD Top Secret Security Clearance with SCI eligibility

Nice To Haves

Experience conducting system and log auditing
Experience with endpoint security enforcement and validation
Experience with vulnerability management
Familiarity with the Joint SAP Implementation Guide (JSIG)
Familiarity with Security Controls Traceability Matrix (SCTM)

Responsibilities

Develop and provide RMF Assessment and Authorization (A&A) documentation in accordance with DoD, NIST, and other governing guidance
Maintain the current, approved Authorization to Operate (ATO) for assigned systems, gathering and updating all required A&A artifacts
Assist with monitoring and implementation of security controls
Support incident management, response, and response coordination activities
Gather artifacts and data to support cybersecurity metrics and reporting
Verify operation of cybersecurity tools such as ACAS, Trellix ePO, and Elasticsearch in accordance with requirements
Perform accurate and verified risk assessments covering security controls and policies for key stakeholders
Track, monitor, and manage Plans of Action and Milestones (POA&Ms), providing technical assistance as required
Analyze, verify, and update PPSMs as required for supported programs
Provide artifacts supporting the maintenance of security authorization packages
Evaluate NIST 800-53 controls for applicability, generate implementation statements, and obtain approvals
Prepare documentation in support of Control Validation Tests (CVTs) to confirm ATO compliance