Cybersecurity Engineer

The Cybersecurity Engineer role at Chugach Government Solutions supports cybersecurity and privacy activities aligned to DoD CS policy and industry best practices. The position focuses on Risk Management Framework (RMF) support, security evaluations, testing, documentation, vulnerability scanning, and preparation for Authority to Operate (ATO) readiness to help protect sensitive data.

Onsite Location

San Diego, CA (onsite)

Key Responsibilities

• Manage project and task timelines through effective time management.
• Maintain communication with client stakeholders, including facilitating weekly or bi-weekly meetings as required.
• Read and modify flowcharts, layouts, diagrams, charts, code comments, and clear code to represent software system information.
• Identify technology limitations and deficiencies within existing systems, processes, procedures, and methods.
• Document and submit configuration items in a consistent manner that aligns with policy requirements for required life cycle deliverables.
• Draft comprehensive test plans to assess and validate task or project completion against client expectations and industry standards.
• Test software systems to evaluate functionality, compatibility, and performance.
• Document and update functional requirements, develop process flows, and maintain related directives and policies, including development of Standard Operating Procedures (SOPs) for a training enterprise.
• Prepare and edit detailed white papers and technical documentation for proposals, including clear and actionable recommendations.
• Create detailed test reports summarizing findings, identifying potential issues, and providing actionable insights to improve system functionality.
• Collaborate with cross-functional teams to support effective integration and validation of project deliverables.
• Assist in defining and improving testing methodologies, frameworks, and best practices to enhance system quality.
• Ensure security controls and automated mechanisms are documented, implemented, and followed to maintain long-term protection of information.
• Validate that enacted security activities and controls are continually assessed.
• Evaluate security gaps and identify solutions to mitigate risk, including improvements across business processes, technical controls, and policy.
• Support program teams and stakeholders in capturing and refining information protection requirements, integrating requirements into system designs, ensuring compliance, and working toward ATO.
• Recommend additional security requirements and safeguards as appropriate.
• Support planning and engagement for security evaluations, systems analyses, security architecture reviews, and similar activities.
• Support formal testing required by government accrediting authorities to validate established security requirements.
• Update, build, and configure modular security applications for various UCES environments.
• Perform vulnerability scanning and provide technical support for the Assured Compliance Assessment Solution (ACAS) to support confidentiality, integrity, and availability.
• Prepare System Security Plans, update Plans of Action and Milestones, review system audits, and monitor corrective actions until closure.
• Develop security and privacy policies in collaboration with IT governance and other policy development groups based on industry best practices.
• Support timely and cost-effective performance of duties, and ensure accurate and timely completion of work.
• Maintain professional and courteous interactions with coworkers and clients in a multicultural environment.
• Adhere to established company safety policies and industrial and office safety practices.
• Follow company and contractual Standard Operating Procedures and Personnel policies and procedures.

Minimum Requirements

• Associate degree in computer science or related field; work experience may substitute for a degree.
• Three years of experience in Cybersecurity.
• DoD 8570-01M IAT Level II Baseline certification (CompTIA Security+ CE, GSEC, SSCP, or similar).
• Utilization experience with Field-Programmable Gate Arrays (FPGA) and J-Link to program processors.
• Proven experience with shell scripting and automation.
• Excellent written and oral communication skills.
• Good interpersonal skills and ability to work in group environments.
• Ability to work in a fast-paced environment with minimal supervision.
• Must have and maintain a DoD Secret Clearance (US Citizenship required).
• Ability to successfully pass any required background check and/or drug testing.

Preferred Qualifications

• Troubleshoot issues with software and coding languages such as C++, C#, HTML, CSS.
• Experience with security evaluations, risk, and control assessments.
• Experience performing vulnerability scanning using DISA ACAS.
• Working knowledge of embedded systems.
• Working knowledge of AC/DC electronics.
• Completion certificate within a relevant domain such as Linux+, RHEL, C++, or similar certifications.
• Understanding of the DoD environment, Navy Shipboard systems, and familiarity with government reviews and audits.

Technologies

• DoD CS policy
• DoD 8570-01M IAT Level II
• CompTIA Security+ CE, GSEC, SSCP
• Field-Programmable Gate Arrays (FPGA), J-Link
• Shell scripting
• ACAS (Assured Compliance Assessment Solution), DISA ACAS
• UCES environments
• System Security Plans, Plans of Action and Milestones

Working Conditions

This position is primarily performed in an office setting using standard office equipment. Work may require travel.

Physical Requirements

Ability to operate a computer and work in a standard office environment, communicate information verbally and in writing, read and review information and charts, perform analytical thinking, use sound judgment, and travel via vehicle and plane.

Education

Associate degree in computer science or related field. Work experience may substitute for a degree.