Cyber Security Engineer Sarasota, FL

Overview

Job Title: Cybersecurity Engineer Job Location: per contract location or Rampant Office locations Sarasota, FL Rampant Technologies is an Equal Opportunity Employer committed to diversity and continuous improvement. This role supports national security missions and government transformation for Intelligence, Defense, and Federal Civilian customers. Essential Duties & Responsibilities

Functional Responsibilities: SME on problem identification, diagnosis, and resolution of problems Develop best practices for processes and standards to improve the system Perform vulnerability assessments using standardized tools (Nessus, DISA STIGs) and implement configuration updates to meet security requirements Track and fulfill liens associated with A&A activities as documented in the Plan of Actions and Milestones Perform hardening of operating systems, COTS, and open-source products Validate best practices in penetration testing, configuration analysis, and security Prepare comprehensive security assessment testing documentation to validate applied security controls in support of A&A testing; generate/maintain RMF artifacts (e.g., Security Requirements Traceability Matrix, Security Plans, Certification Test Plans, Continuous Monitoring Plans) Perform timely updates in accreditation databases Provide technical guidance focused on information security architecture Key Skills, Education & Experience

Education: Bachelors degree in Computer Science, Information Assurance, Information Security System Engineering, or related discipline. Without a degree, twelve (12) years of Cybersecurity Engineer experience may be substituted for a bachelors degree. Required Experience and Skills: Minimum of eight (8) years of relevant experience as a Cybersecurity Engineer in programs/contracts of similar scope; ideally 3+ years at the same level for like role Experience with A&A process (e.g., ICD-503) and information security/continuous monitoring per NIST SP 800-53 and NIST SP 800-53A Knowledge of DCID 6/3, ICD 503, CNSSI 1253, NIST SP 800-53, 800-53A, 800-37; security controls assessment; integrity, availability, authentication, non-repudiation IT security principles and methods; network access and PKI concepts; security system design tools and techniques Familiarity with laws, policies, or governance related to critical infrastructure TCP/IP networking, Linux administration, patch management, vulnerability management for Windows and Linux Continuous monitoring per NIST SP 800-137; virtualization (VMware, Docker); OSI model knowledge; DoD/IC security controls; XACTA and SNOW Experience with security testing tools (ACAS, Wireshark, Retina, Tripwire); proficiency with Microsoft Office, Project, Visio Self-starter with strong written and verbal communication Desired Experience/Skills: Understanding of Independent Assessor principles and confidentiality requirements Ability to articulate business/technical needs to diverse stakeholders Experience in a matrixed environment; collaboration and coalition-building Professional interaction with all levels of the organization Contract/Project Support & Team Responsibilities

Assist Principal Engineer (PE) with customer relationship management and issue escalation Support project/task execution and monitoring; lead tasks may apply at Mid/Senior levels Evaluate information from multiple sources; share knowledge with new team members Ensure timely task delivery, contract documentation, quality reviews, and status reporting Provide feedback to PEs on challenges that affect delivery and communicate schedule constraints Contract escalation resolution within internal teams and with the customer as needed Identify upsell opportunities within existing contracts and assist with RFI/RFPs when warranted Maintain open communication lines when matrixed to other contracts Adhere to performance measures and annual goals; perform other duties as assigned Certifications & Credentials

Active TS/SCI with poly required DoD 8570 IAM or IAT Level 3 certification required; if not held at start, must obtain within 6 months and maintain thereafter IAT Level II certifications (Security+ or equivalent) Language, Physical Demands

All output, communications, materials will be in English. Physical demands are predominantly stationary, office-centric work; travel may be required. Voluntary Self-Identification

Voluntary EEO and disability self-identification information is collected for federal contracting purposes. Information provided is confidential and used to measure diversity and compliance with equal opportunity obligations. #J-18808-Ljbffr