Cybersecurity RMF Engineer

Cybersecurity Rmf Engineer

Concurrent Technologies Corporation Mcb Hawaii Minimum Clearance Required: Secret Clearance Level Must Be Able To Obtain: Secret

As a trusted partner and leader in providing energy and sustainability consulting services to the federal government, Concurrent Technologies Corporation (Ctc) understands the increasing complexity of achieving energy security and data management in a changing world. As part of the energy, resilience and sustainability (Ers) division, you will collaborate with experts to provide comprehensive policy, planning, and implementation services to deliver solutions that address critical infrastructure resilience and security, and data management issues and support the military mission, while reducing environmental impacts. We take our role seriously, as our efforts ensure our installations and assets are prepared in any operating environment, present and future. The ers division is seeking a qualified and proactive candidate to provide information technology (It), operational technology (Ot) and cybersecurity support. The candidate will work with a small team to secure and defend facility related control systems supporting the marine corps critical infrastructure. The cybersecurity rmf engineer will report directly to the ers division director and build on the teams knowledge of facility related control systems architecture, engineering and cybersecurity. This is an onsite position working directly with the customer. Some travel may be required.

key responsibilities:

• Assist in computer network defense assessments, including threat intelligence, risk identification, vulnerability management, and security operations.
• Assess compliance using nist, dod, usmc and other security requirements to include the cnssi 1253 and/or nist 800-53 security controls and disa stigs/srgs
• Develop, submit, and maintain rmf packages in emass for control systems and scada environments.
• Coordinate with issms, system owners, and other cybersecurity stakeholders.
• Support site assessments, system categorization, and cybersecurity evaluations for operational technology (ot).
• Provide guidance on cybersecurity compliance for ics/scada vendors and integrators.
• Continuously assess the cybersecurity posture of assigned sites by verifying scans, reviewing policies and procedures, and making recommendations for improvement.
• Assist in assessment activities on both frcs/ot and it according to documented requirements (i.e. stig/srg) and scan using tools such as acas, nessus, and lansweeper.
• Analyze assessment data to identify system deficiencies and vulnerabilities.
• Provide remediation recommendations to address vulnerabilities.
• Stay abreast of emerging cyber threats, attack techniques, and industry best practices in computer network defense.
• Assess their potential impact on the organization and make recommendations for proactive measures.