Cybersecurity Engineer

Overview

Support the Cybersecurity team on the DHMSM program for the Department of Defense Healthcare Management System Modernization, reviewing EHR architecture and technical artifacts from a cybersecurity perspective and assisting in developing and implementing Cyber Information Assurance policies and procedures.

What you'll do

• Support the Cybersecurity team in complex to highly complex aspects of Leidos Cybersecurity planning of the EHR system, and provide leadership to individual tasks as necessary
• Support the Cybersecurity Lead in developing and managing project management plan(s), providing management summaries that identify potential risks and recommend plans to mitigate them
• Conduct ACAS scans to identify new vulnerabilities and findings on DHMSM ATOs; provide finding metrics and evidence of closures/burndown
• Modify, optimize, and develop new automation scripts (e.g., PowerShell, Python) to streamline vulnerability scanning, data ingestion, and reporting processes
• Support the Cybersecurity Lead in developing and implementing a communication plan that provides regular updates to all staff on project implementation
• As needed, support the Cybersecurity Lead in meeting, presenting, and providing operational status updates to senior government personnel on the program
• As necessary, update and maintain Risk Management Framework (RMF) controls, POA&Ms, and other security artifacts within eMASS
• Assist the Cybersecurity Lead in ensuring the project meets identified milestones
• Support the development of cyber strategy and associated documentation
• Provide Subject Matter Expertise for customer inquiries
• Support the establishment and maintenance of internal and external relationships for cyber-related collaboration

What you'll need

• BS degree and 8-12 years of prior relevant experience
• US Citizenship required
• Active Secret or higher security clearance required for Federal Government contract
• Security certification in accordance with DoD 8570.01 IAT-II/IAM-II or higher (e.g., CompTIA Security+ (with CE), SSCP, CISSP)
• Experience with cyber risk management tools such as DoD Enterprise Mission Assurance Support Services (eMASS)
• DoD contract experience leading cyber activities throughout project lifecycle
• Excellent written and verbal communication and presentation skills
• Experience with Controls and Risk Management Framework
• Experience with the DoD Information Assurance Vulnerability Management (IAVM) Program
• Substantial knowledge of networks, cyber defense toolsets and processes
• Experience with automation/scripting
• Experience with Assured Compliance Assessment Solution (ACAS) vulnerability scanner, Security Technical Information Guidance (STIG) requirements and compliance process, SCAP Content Checker, Security Readiness Review (SRRs), and other DoD approved tools

Nice to have

• DoD Military Health experience
• Experience with PowerBI
• Ability to multitask and solve complex technical problems
• Adaptable to changing circumstances and operational needs
• Experience working with other vulnerability suite tools (e.g., CrowdStrike, Qualys)

Details

• Remote role; work must be completed within the United States
• Pay range: $107,900.00 - $195,050.00