Cyber Security InfoSec Engineer - SC-51

AttainIT Technologies is seeking an Information Systems Security Engineer (ISSE) to support a technical development program building and securing cloud-based applications and cloud infrastructure on a highly secure network. This role focuses on integrating security throughout the SDLC for a 100% AWS environment, helping your team deliver with confidence while meeting NIST and DISA requirements.

Responsibilities

• Participate in regularly scheduled Agile scrum/tag-up meetings and provide status updates on assigned Jira issues
• Attend ad-hoc TEMs to discuss architectural aspects and assess security impacts related to system changes
• Assist with and/or lead security scans, then report and analyze findings for security impact
• Review externally reported CVEs, assess system impact, and determine best steps for remediation
• Participate in team TEMs to evaluate future system changes and new features for security impacts
• Identify, select, implement, and assess NIST SP 800-53 security and privacy controls
• Develop, establish, and integrate secure configuration baselines aligned to DISA STIGs and CIS benchmark guidelines
• Contribute to secure architectures and system design efforts
• Ensure security requirements are integrated into the System/Software Development life cycle (SDLC)
• Perform Continuous Monitoring (ConMon) activities to support Assessment and Authorization (A&A)
• Review, create, and maintain relevant A&A artifacts
• Conduct security analysis and monitoring for a 100 percent AWS cloud-based system
• Perform vulnerability scanning and analysis of the system
• Perform remediation and develop security implementations based on security findings
• Interface with Information System Security Managers (ISSM) to develop and accredit the system
• Participate in or lead technical exchange meetings, document outcomes as needed, and brief management

Requirements

• Active TS/SCI with Polygraph
• Typically requires: Bachelor of Science (BS) degree or relevant demonstrable experience
• 6+ years of relevant experience
• Hands-on experience with Linux (CLI)
• Hands-on experience with scripting/programming such as BASH and Python
• Solid networking understanding (ports, routing tables, subnets, VPNs, firewalls, routers) including design, integration, and troubleshooting
• Experience working on teams using Agile workflows and processes
• Strong understanding of NIST SP 800-37, NIST SP 800-53, NIST SP 800-160, DISA/CIS STIGs, and CVEs
• Experience with RMF workflow tools
• Strong communication, organizational, and writing skills
• Ability to clearly articulate findings and recommendations
• Open-minded approach to alternative solutions proposed by other team members for security issues

Technologies

• Linux (CLI), BASH, Python
• AWS
• Jira
• NIST SP 800-53, NIST SP 800-37, NIST SP 800-160
• DISA STIGs, CIS benchmark guidelines
• Common Vulnerabilities and Exposures (CVEs)
• RMF workflow tools
• SDLC, Assessment and Authorization (A&A)
• Continuous Monitoring (ConMon)

Benefits

• Competitive salary
• Health, dental, and vision
• PTO and federal holidays
• Matching 401(k)
• Education and training reimbursement
• Performance bonuses and referral bonuses
• Corporate events

Desired Skills

• Relevant IT certifications (examples include CISSP, AWS Cloud Practitioner, AWS Cloud Security, AI security)
• Experience with Infrastructure as Code (IaC) such as Ansible / Terraform or other configuration and automation tools
• Experience working in a cloud-based environment (AWS)

COVID-19 Vaccination Policy: Employees are required to adhere to the customer’s vaccination policy.