Cybersecurity Engineer

Virginia, United States

Full-time

Hybrid

$87K/yr - $152K/yr

Entry, Mid Level

Parsons is an engineering, construction, technical and management services firm, and they are seeking a Cybersecurity Engineer to join their team. In this role, you will contribute to the development, implementation, and maintenance of cybersecurity strategies, ensuring the protection of sensitive information against cyber threats.

Apply Now

Responsibilities

Validating and verifying system security requirements
Developing and reviewing system security designs
Participating in system planning, development, and deployment activities to ensure adherence to security standards and requirements
Recommending system-level solutions to resolve security requirements
Supporting the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures, acting as an advisor to the Government ISSM on ATO extensions, body of evidence reviews
Developing cybersecurity documentation in support of customer Risk Management Framework (RMF) process; in accordance with NIST SP 800-37 Rev 2, NIST SP 800-53 Rev 4/5
Identifying, quantifying, and evaluating the costs/benefits of security functions and considerations to inform analysis of alternatives, engineering trade-offs, and risk treatment decisions
Demonstrating advanced subject matter expertise in DOD cybersecurity processes
Contributing to and potentially leading the planning and implementation of large programs in the function, regularly interfacing with senior management and executive leadership
Contribute to overall functional strategic planning
Performing other responsibilities associated with this position as may be appropriate

Qualification

Required

B.A./B.S. in Information Security System Engineering, Information Assurance, Computer Science, or related discipline (Educational requirements may be adjusted for applicable work experience.)
1-3 years’ experience as ISSE or relatable responsibilities (Work experience may be adjusted for highly specialized knowledge or uniquely applicable experience.)
Advanced knowledge of the DOD Risk Management Framework (RMF) processes, NIST 800-53 Rev 4/5, along with supporting tools (eMASS)
Ability to deploy, manage, scan, and mitigate vulnerability findings, including ACAS deployments
Can perform cybersecurity program tasks, to include mitigation planning and compliance activity roadmap design with little or no guidance/supervision
Excellent written and verbal skills; able to gather customer requirements, communicate solutions, and remain actively engaged with the customer throughout the life of the project and associated tasks
8570 compliant, security-focused certifications (Sec+, CHFI, CEH, CISSP, CASP)
Direct experience reviewing and developing RMF assessment and authorization documentation (e.g., System Security Plans (SSPs), Security Assessment Reports (SARs), and Plan of Action and Milestones (POAMs)
Experience with analyzing and creating checklists using DISA Security Technical Implementation Guides (STIGs)
Familiarity with Systems Security Engineering (SSE) documentation (e.g., Cybersecurity Strategies, Information Support Plans, Program Protection Plans (PPPs)
Experience working with eMASS
A current Secret level security clearance is required and therefore all candidates must be a U.S. Citizen

Preferred

B.A./B.S in Cyber Security
DoD 8570 IAT-III certification
Knowledge of Cloud (i.e., AWS C2S, Commercial, and GovCloud) security planning, design, and operations
Knowledge of Cloud C2E initiative
Experience in engineering cross-domain solutions
Experience with accrediting data systems within a cloud environment
Intermediate knowledge of Cloud-system accreditation processes