ConMon Security Engineer

The most security-conscious organizations trust Telos Corporation to protect their vital IT assets. The reputation of our company rests on the quality of our solutions and the integrity of our people. Explore what you can bring to our solutions in the areas of cyber, cloud and enterprise security.

Be a part of the Telos culture and see what sets us apart! Telos offers an excellent compensation package with benefits that include generous paid time off, medical, dental, vision, tuition reimbursement, and 401k. The annual salary range for this position is $135,000 - $155,000. Our employees enjoy more than just a great work environment!

This position will be based at Tysons, VA.

Telos is seeking a highly skilled Cybersecurity Professional to modernize and operate our Continuous Monitoring (ConMon) program for our customers. This role is designed for a strategic thinker capable of bridging the gap between operational compliance and scalable program development. The ideal candidate will leverage an extensive background as a ConMon practitioner, an Information System Security Officer (ISSO) and subject matter expertise in eMass to ensure mission-critical systems maintain their Authorization to Operate (ATO). We are looking for a professional who not only executes daily security mandates but also possesses the vision to automate complex workflows and standardize security procedures at an organizational scale.

Responsibilities:

• Continuous Monitoring Operations-
• Execute the end-to-end monthly government submission process, ensuring all required security documentation is accurate and delivered on schedule.
• Manage and maintain system records within eMass, serving as the primary subject matter expert for data entry, reporting, and workflow management.
• Perform comprehensive parsing and analysis of vulnerability scan files (e.g., Tenable, Qualys), comparing results against historical data to identify emerging risks.
• Own the Plan of Action & Milestones (POA&M) lifecycle, including weekly tracking, stakeholder follow-up, and driving all identified vulnerabilities to remediation.
• Coordinate the collection of compliance evidence (e.g., facility access reviews, audit logs) by building strong professional relationships with system owners and stakeholders.
• Automation-Driven Operational Excellence-
• We leverage automation as an enabler to modernize and scale our security operations, transforming manual data collection into streamlined, repeatable workflows.
• Spearhead the design and implementation of automated workflows to streamline recurring evidence collection and reporting tasks.
• Orchestrate the development of scripts and utilization of advanced tools to modernize the tracking of ConMon activities and data workflows.
• Conduct gap analyses on existing processes to modernize areas of improvement, particularly concerning the transition to updated regulatory frameworks such as NIST SP 800-53 Rev 5.
• Standardize security procedures and compliance artifacts at an organizational scale to ensure consistency across all enclaves.
• Author justification language and remediation instructions to provide engineering teams with clear, actionable guidance.
• Stakeholder & Relationship Management-
• Build and cultivate strong professional relationships with ConMon owners to ensure alignment on security standards and evidence requirements.
• Act as a trusted advisor to stakeholders, proactively negotiating acceptable evidence formats that can be standardized across all organizational ConMon programs.
• Communicate compliance status and remediation expectations clearly to technical and non-technical stakeholders to ensure seamless operational continuity.