Cybersecurity Engineer Mid - Continuous Monitoring
Mid-level cybersecurity engineer supporting a DoD continuous monitoring (ConMon) program: assessing and monitoring security controls, producing weekly status reports, and maintaining RMF/eMASS packages using tools like Splunk, ACAS, Qmulos, and Axonius. Requires US citizenship, an active Top Secret clearance, and full-time on-site work in MD, PA, or VA.
- Compensation
- $70K / yr
- Location
- Fort Meade, MD; Chambersburg, PA; Alexandria, VA
- Work setup
- Not specified
- Seniority
- Middle
- Employment
- Contract
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- US Citizenship is required
- Must have and maintain an active DoD Top Secret clearance
- Bachelor's degree (IT-related field preferred) or equivalent professional experience
- DoD 8570 IAT or IAM Level II certification
- Five years overall experience in cybersecurity, systems engineering, or similar technical field
- Proficiency in one or more of: Qmulos, Splunk, ACAS, Axonius, CheckMark, BURP, HBSS
- Understanding of RMF process, NIST SP 800-37, NIST SP 800-53, CNSSI 1253
- Experience developing, implementing, and conducting a continuous monitoring program for a large organization
- Proficiency in security architecture, system hardening, vulnerability management, and intrusion detection/prevention
- Strong written and oral presentation skills
- Customer service skills
- Available to work full-time on-site at Ft. Meade MD, Chambersburg PA, or Alexandria VA
Full description
About Us
AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future.
AGE Solutions is looking for a Cybersecurity Engineer Mid - Continuous Monitoring to join our team in support of a cybersecurity risk management and assessment program with our DoD customer.
Responsibilities Include:
- Utilize Qmulos, Splunk, ACAS, Axonius, CheckMark, BURP, and ESS to assess, validate, and monitor enterprise and system-level security controls.
- Develop and maintain the ConMon Strategy to support the A&A mission.
- Create and update the ConMon SOP, detailing oversight and monitoring requirements for IT systems throughout their lifecycle.
- Conduct continuous security control assessments for all ISs under the organization’s purview.
- Perform automated and manual monitoring, generating weekly security control status reports using live data from security tools.
- Ensure ConMon-related controls are properly implemented in RMF packages within eMASS.
- Conduct ongoing assessments in compliance with industry auditor standards to monitor security, vulnerabilities, and threats.
- Report system risk status using the DISA-approved reporting tool.
- Maintain the ConMon Dashboard, tracking compliance, POA&M status, CMRS visibility, asset management, FISMA reviews, and annual validations.
- Track automated and manual security controls, identifying overdue assessments and validations.
- Coordinate with system administrators, ACAS administrators, and HBSS administrators to resolve credentialing and data issues.
- Provide real-time IS security status metrics based on the ConMon Strategy and SOP.
- Notify the Government within 60 minutes of security posture changes that negatively impact a system.
Required Skills, Qualifications, and Experience:
- Citizenship and Clearance:
- US Citizenship is required.
- Must have and maintain an active DoD Top Secret clearance.
- Education and Certifications:
- Bachelor's degree (IT-related field preferred), or equivalent professional experience.
- DoD 8570 IA Technical (IAT) or IAM Level II certification.