Sr. Cybersecurity Engineer I (6104)

AsSr. Cybersecurity Engineer I youll serve as the principal advisor to the Information System Owner (SO) Business Process Owner and the Chief Information Security Officer (CISO) / Information System Security Manager (ISSM) on all matters technical and otherwise involving the security of an information system. The ideal candidate will also be responsible for ensuring the implementation and maintenance of security controls in accordance with the Security Plan (SP) and Department of Homeland Security (DHS) policies.

We know that you cant have great technology services without amazing people. At MetroStar we are obsessed with our people and have led a two-decade legacy of building the best and brightest teams. Because we know our future relies on our deep understanding and relentless focus on our people we live by our mission: A passion for our people. Value for our customers.

If you think you can see yourself delivering our mission and pursuing our goals with us then check out the job description below!

What youll do:

• Communicate regularly with DHS customers and internal engineering teams to lead required RMF process/steps to assess and authorize a system obtaining and maintaining a full ATO (Authority to operate)
• Perform monthly continuous monitoring reporting to include analysis of scans logs accounts etc
• Support writing and reviewing of Risk Management Framework (RMF) documentation packages to support risk assessments
• Design and execute the security testing plan of all requirements and analysis required to complete a RMF package document for submittal and approval
• Use vulnerability scanning tools and frameworks to evaluate the security posture of a system
• Assist the customer in preparing training and table top exercises for contingency planning incident response and disaster recovery
• Complete ISSO USCIS provided training as required

What youll need to succeed:

• Ability to obtain and maintain a DHS suitability clearance
• You have at a minimum a Bachelors degree in Computer Science or other
  comparable degree or experience
• Minimum five (5) years of IT experience as a Security Lead or Information Security Analyst with a focus on evaluating implementing and managing security practices for new and existing technologies
• Hold ISSO certifications
• Experience with Amazon Web Services (AWS) Architecture
• Experience with Continuous Monitoring and reporting monthly status reports
• Experience analyzing and reporting cyber security vulnerability scans
• Experience with requirements analysis architect design and documentation development of cybersecurity and information security solutions
• Experience performing vulnerability risk analysis on the deficiencies found during RMF control testing
• Experience with cybersecurity tools and scanners used to evaluate the security posture of the system/enclave (preferred tool experience: Palo Alto Prisma Cloud BurpSuite Checkmarx NexusIQ SonarQube)
• Expertise in Agile and DevSecOps approaches
• Knowledge of web databases containers and application security scanning and reporting for RMF processes procedures and governance
• Knowledge of Cybersecurity Network Systems and Software Engineering best practices

Have technical understanding of cloud technologies (i.e. AWS microservices zero trust data streaming data pipelines containers etc.) and their implementation within the customers network environments

SALARY RANGE: $101000 - 135000

The salary range for this position is determined based on qualifications skills and relevant experience. The final salary offered will be determined based on several factors including:

• The candidates professional background and relevant work experience
• The specific responsibilities of the role and organizational needs
• Internal equity and alignment with current team compensation
• This role is also eligible for additional compensation subject to the terms and policies of MetroStar which may include:
• Performance-based bonuses
• Company-paid training and/or certifications
• Referral bonuses