Position Summary:
The Cybersecurity Engineer / SME will support cybersecurity activities for an Army tactical system, with emphasis on Risk Management Framework (RMF), Army cybersecurity compliance, vulnerability management, DISA STIG reviews, cyber scan analysis, and authorization support. This position requires a hands-on cybersecurity professional with strong Army and DoD RMF experience and technical expertise reviewing DIDA STIGs, cybersecurity scans, vulnerability assessments, and authorization artifacts. The ideal candidate will be capable of independently analyzing technical findings, maintaining compliance evidence, supporting eMASS activities, coordinating with stakeholders, and adapting to evolving Army and DoD cybersecurity requirements.
Onsite: Ft. Belvoir
Essential Duties and Responsibilities:
- Lead and support Army RMF activities for system authorization, cybersecurity compliance and continuous monitoring efforts.
- Review, analyze, and maintain DISA STIG compliance artifacts, including STIG Viewer checklists (.CKL files), supporting evidence, and remediation status.
- Execute, review, and interpret cybersecurity scans, including SCAP Compliance Checker, ACAS, vulnerability scans, and related assessment results.
- Correlate DISA STIG findings, scan results, vulnerability data, and security assessment findings to identify compliance gaps, assess risk, and establish remediation priorities.
- Develop, review, and maintain cybersecurity documentation, including System Security Plans (SSP), Cybersecurity Strategies, POA&Ms, risk assessments, mitigation plans, and RMF authorization artifacts.
- Maintain cybersecurity records and authorization package data within eMASS in support of IATT, ATO, Assess Only and Continuous Monitoring requirements.
- Coordinate with Government stakeholders, Authorizing Officials (AO), Security Control Assessors (SCA), system engineers, software developers, cloud teams, vendors, and assessors to resolve cybersecurity findings and drive remediation efforts to closure.
- Review Vendor’s cybersecurity deliverables for technical adequacy, compliance, and alignment with Army and DoD cybersecurity requirements.
- Support cybersecurity test events, vulnerability assessments, penetration testing, security reviews, and authorization readiness activities.
- Evaluate cybersecurity risks and provide recommendations to program leadership regarding compliance posture, remediation status, risk acceptance, and authorization impacts.
- Support implementation of new Army and DoD cybersecurity policies, guidance, and requirements and assess impacts to the program.
- Serve as a cybersecurity advisor to program leadership and technical teams on RMF, vulnerability management, compliance, and risk management activities.
Requirements:
- Active Secret Clearance required to start
- Security+ CE or higher DoD 8140/8570 compliant certification.
- Strong experience with RMF activities for Army or DoD systems and supporting tactical systems through IATT, ATO, and Continuous Monitoring activities.
- Solid knowledge of AR 25-2, DoD RMF, NIST 800-53 security controls, and Army cybersecurity requirements.
- Hands-on experience reviewing DISA STIGs, STIG Viewer checklists, CKL files, and cybersecurity compliance evidence. Identify compliance gaps and remediation priorities.
- Experience developing and maintaining POA&Ms, remediation plans, risk assessments, mitigation plans, and RMF authorization artifacts.
- Ability to work independently with minimal supervision and effectively coordinate with Government personnel, assessors, engineers, software developers, cloud teams, and vendors.
Special Note:
Education requirement:
- BS Electrical Engineering and > 5 years of experience (LEVEL II)
or
- MS Electrical Engineering or Equivalent and > 15 years of experience (LEVEL III)
Clearance Requirement
Benefits and Compensation:
At MAG Aerospace, we value your contributions providing our employees with a robust Total Rewards package that supports your total well-being. Full-time and part-time employees working at least 30 hours a week on a regular basis are eligible to participate in MAG's Total Rewards programs. Our offerings include health, life, disability, financial, and retirement benefits as well as paid leave, professional development, and tuition assistance. Individuals that do not meet the threshold are only eligible for select offerings not inclusive of health benefits. We encourage you to learn more about our Total Rewards Program by visiting the Resource page on our Careers site: https://www.magaero.com/benefits/. Salary at MAG Aerospace is determined by various factors including but not limited to location, the particular combination of education, knowledge, skills, competencies, and experience as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $100,000 to $165,000 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of MAG's total compensation package for employees.