Cybersecurity Engineer

Overview

DecisionPoint is looking for a Cybersecurity Engineer to join the Cloud Services (CS) team. The CS team maintains the ARTRANS AWS cloud environments and DevSecOps platform.

In this role, you will implement and manage security controls in accordance with Risk Management Framework (RMF) and NIST SP 800-53 standards. Integrate RMF requirements and associated security controls into the DevSecOps pipeline to support continuous security and compliance for all Programs of Record (PORs) that use the pipeline.

This position is 100% remote work and requires an active Secret clearance.

Duties & Responsibilities

• Implement and manage security for the ARTRANS DevSecOps pipelines and AWS GovCloud accounts.
• Remediate security finding within AWS GovCloud.
• Implement security controls for the DevSecOps pipeline.
• Develop solutions for RMF Risk Assessments (RA’s) and Plans of Action and Milestones (POAMS)
• Embed security controls in Infrastructure as Code (IaC) and Configuration as Code (CaC)
• Evaluate, document, and report identified risks.
• Recommend a course of action for risk mitigation.
• Assess and recommend tools and platform features that support compliance with Zero Trust and RMF security requirements.

Qualifications

• Active Secret clearance required.
• Associate degree with 6 years of related experience, or 10 years of continuous related work experience.
• Strong understanding of AWS GovCloud and experience applying NIST SP 800-53 Rev. 5 and RMF requirements.
• DoD 8140 Information Assurance Technician (IAT) Level II certification, such as Security+ CE.

Our Equal Employment Opportunity Policy

• EEO and Affirmative Action Policy: DecisionPoint Corporation is an Equal Employment Opportunity and Affirmative Action employer. It is the policy of DecisionPoint Corporation to provide equal employment opportunity in accordance with all applicable Equal Employment Opportunity/Affirmative Action laws, directives and regulations to all employees and qualified applicants without regard to race, ethnicity, color, religion, national origin, sex, age, disability status, pregnancy, sexual orientation, gender identity, genetic information, protected veteran status, or any other protected status under Federal, State or Local laws.
• Pay Transparency Policy: In accordance with Presidential Executive Order 13665, DecisionPoint Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information.
• Authorization to Share Resume and Personal Information: By expressing your interest and submitting your resume for this position, you authorize DecisionPoint Corporation to share your resume, as well as personal information included on the resume, with its subsidiaries, affiliates and teaming partners for the purpose of considering you for this position and other available positions requiring comparable skills, education and experience. Should DecisionPoint Corporation. or its affiliates and teaming partners wish to initiate pre-employment discussions, you will be asked to complete an employment application and related employment documents.

Responsibilities

- Implement and manage security for the ARTRANS DevSecOps pipelines and AWS GovCloud accounts.
- Remediate security finding within AWS GovCloud.
- Implement security controls for the DevSecOps pipeline.
- Develop solutions for RMF Risk Assessments (RA’s) and Plans of Action and Milestones (POAMS)
- Embed security controls in Infrastructure as Code (IaC) and Configuration as Code (CaC)
- Evaluate, document, and report identified risks.
- Recommend a course of action for risk mitigation.
- Assess and recommend tools and platform features that support compliance with Zero Trust and RMF security requirements.