Cyber Systems Security Engineer

M9 Solutions is seeking a Cyber Systems Security Engineerto work on a government contract for a client located in Colorado Springs, CO. An active TS/SCI clearance is required.

Responsibilities

• Provide Cybersecurity Systems Engineering (CSSE) knowledge and expertise to:
  
  
  
  • Maintain awareness of current and emerging cyber threats.
  • Assist with the analysis of cyber threats and help determine the impact to the systems.
  • Evaluate how the systems can mitigate the cyber threats and then develop Courses of Action (COAs) to mitigate threats and prioritize risks.
  • Develop procedures to counter/mitigate cyber threats while maintaining the mission to the maximum extent possible.
  • Assist with the development of recovery plans to return the systems to operation.
  • Apply systems engineering and cyber expertise for the development and implementation of mission recovery support Tactics Techniques and Procedures (TTPs) when / if cyber incidents occur.
  • Assess software and hardware behaviors due to systems' modifications and any related expected system impacts.
  • Support and implement intrusion detection solutions into system baselines that include, but not limited to, host-based intrusion detection systems (HIDS), network intrusion detection (NIDS) and/or intrusion protection systems (IPS) where not covered or inherited by defensive cyber operations.
    
    
    
    • Analyze, report, and summarize DISA Endpoint Security Solution (ESS) data.
    • Perform primary operational point of contact duties for the program's cybersecurity defense suite of tools.
    • Manage CSS accounts, accesses, and monitoring dashboards.
    • Provide Tier 1 troubleshooting for CSS tools.
    
    
    
    
  
  
  
  
• Provide CSSE support and expertise by:
  
  
  
  • Preparing, maintaining, and submitting the RMF-artifact delivery schedule (which includes identified RMF package delivery dates), as provided in the approved format, that captures the status of the submission frequency of the identified RMF artifacts per system sustainment cybersecurity-related activities being performed in accordance with the contract.
  • Creating and updating information system artifacts, such as hardware/software baselines, Ports, Protocols, and Services Management (PPSM), network diagrams, etc.
  
  
  
  
• Ensure information systems meet Risk Management Framework (RMF) standards by directly communicating with the respective Information Systems Security Officer (ISSO)/Information Systems Security Manager (ISSM).
• Perform network vulnerability scans in support of end client validation checks for the program's information systems.
  
  
  
  • Analyze,summarize, and prioritize scan vulnerabilities.
  • Routinely review and work with fellow CSSEs, ISSO, and ISSM to prioritize cyber findings and engineering remediations.
  
  
  
  
• Deliverfully tested vulnerability patch and virus signature releases for each system every 60 calendar days (6 times annually) as approved by the end client before installation.
• Support, update, and/or develop Security Assessment Plans (SAP).
• Provide technical engineering and cyber support for all required cybersecurity technical meetings.

Required Skills and Qualifications

• Active Top Secret/SCI security clearance.
• Bachelor's degree with 9+ years of experience or master's degree and 7+ years of experience.
  
  
  
  • Idealcandidate will have an Engineering, Mathematics, Applied Sciences, or Computer Science degree.