[Hiring] Lead Cybersecurity Engineer @TekSynap

Role Description

TekSynap is seeking a Lead Cybersecurity Engineer / Scientist to join our team at Defense Health Agency to provide technical leadership for cybersecurity assessment and authorization activities supporting DHA systems and enclaves. Responsibilities include:

• RMF implementation
• IV&V testing
• Vulnerability assessment
• STIG validation
• Development of authorization packages for NIWC Atlantic managed cybersecurity efforts

Qualifications

• 15 years DoD engineering/cybersecurity; managerial experience required
• RMF lifecycle implementation experience
• STIG validation experience
• IV&V cybersecurity testing experience
• eMASS experience
• Vulnerability assessment experience
• Enterprise network security experience
• Demonstrated experience supporting government agencies, customers, or contracts within federal environments, including the Intelligence Community (IC), Department of Defense (DoD), Federal Civil agencies, and military organizations
• Prior experience supporting the same or similar contract, with an in-depth understanding of the customer environment, requirements, and operational landscape, is highly desirable
• IAM Level III Certification preferred (e.g., CISSP, CISM, CASP, GSLC, CCISO)
• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, Information Systems, or related discipline
• Secret clearance (ability to obtain TS preferred)

Requirements

• Serve as Lead Technical Engineer for cybersecurity assessment and authorization execution
• Lead implementation of RMF controls across systems, enclaves, and sites
• Develop and maintain Security Assessment Plans (SAP)
• Develop cybersecurity test procedures aligned to NIST and DoD guidance
• Conduct security control assessments across technical, operational, and management controls
• Perform Independent Verification & Validation (IV&V) testing activities
• Conduct vulnerability assessments using ACAS, HBSS, and related tools
• Analyze vulnerability scan results and identify remediation actions
• Develop Security Assessment Reports documenting findings and recommendations
• Perform reassessment of remediated controls and update test results
• Provide technical leadership for RMF package development
• Support creation of SSP, SAR, POA&M, and supporting artifacts
• Conduct system security architecture reviews
• Evaluate enclave and system boundary definitions
• Perform risk assessments and residual risk analysis
• Support development of authorization packages in eMASS
• Provide technical validation of RMF artifacts
• Support validation readiness review activities
• Support IV&V test event planning and execution
• Provide technical oversight of STIG implementation
• Develop cybersecurity test matrices and validation procedures
• Support automated tool development for cybersecurity testing
• Analyze ACAS data and generate vulnerability reports
• Support automation of STIG assignment and test planning
• Provide cybersecurity engineering support for DHA toolsets
• Support development of dashboards and reporting metrics
• Provide technical guidance to cybersecurity analysts and engineers
• Support network, server, and application security testing
• Support encryption, authentication, and boundary security reviews
• Participate in technical review boards and working groups
• Support continuous monitoring and risk scoring activities
• Support remediation tracking and POA&M closure validation
• Provide technical briefings to Government stakeholders
• Support CONUS and OCONUS site cybersecurity assessments
• Support cybersecurity documentation and reporting deliverables

Benefits

• Competitive benefits package including health, dental, vision, 401K, life insurance, short-term and long-term disability plans, vacation time, and holidays

Company Description

TekSynap is a fast-growing high-tech company that understands both the pace of technology today and the need to have a comprehensive well-planned information management environment. “Technology moving at the speed of thought” embodies these principles – the need to nimbly utilize the best that information technology offers to meet the business needs of our Federal Government customers.