Cybersecurity Engineer (isse), Principal

Cybersecurity Engineer

Parsons is seeking a cleared Cybersecurity Engineer to join our team of Cyber & Intelligence professionals supporting our partners. In this role, you'll assist by working closely with the software development teams to develop secure baseline configurations for their integrated DevSecOps environment, test and verify systems remain compliant with current NIST standards, and ensure the project is protected against the ever-evolving threat landscape.

Ability to travel to MD as needed is required.

What You'll Be Doing:

• Work closely with system designers, operators, as well as industry to design security into products, develop new standards, and highlight requirement gaps
• Design and conduct risk assessments to ensure capabilities are integrated properly without threat to the systems' security posture
• Generate cybersecurity functional requirements during design reviews and support the agile development of systems and capabilities
• Develop and execute, security-centric test and evaluation procedures and document results
• Troubleshoot and investigate system configurations, patches, security scan findings
• Identify and update security and virus scan definitions to determine integration strategies and baseline impacts
• Review Security Technical Implementation Guide (STIG) findings and ensure all systems and capabilities remain compliant
• Provide support to the Assessment and Authorization (A&A) Risk Management Framework (RMF) with processes established in DOD Instruction 8510.01 on all client managed systems, to ensure the valid and accurate review of all associated documentation
• Develop and review certification and accreditation documents
• Develop and review RMF artifacts (e.g., System Security Plan (SSP); Ports, Protocols and Services (PPS); and Accreditation Boundary diagrams)

What Required Skills You'll Bring:

• B.A./B.S. in Cyber Security, Information Security Engineering, mathematics, or a related field (Educational requirements may be adjusted for applicable work experience.)
• Current DoD 8570 IAT II certification
• Must have recent RMF and ATO experience.
• Must have extensive experience in Cyber Security Tools, network topologies, intrusion detection, PKI, and secured networks.
• 10+ years of experience in designing and implementing systems that meet agency Cyber Security policy and regulations. (Work experience may be adjusted for highly specialized knowledge or uniquely applicable experience.)
• Knowledge of Risk Management processes and methodologies
• Experience developing RMF documentation and artifacts (e.g., PPS, design diagrams, SOPs, POA&Ms, etc.)
• Experience in network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth)
• Good verbal and written communication skills
• A current Secret level security clearance is required and therefore all candidates must be a U.S. Citizen

What Desired Skills You'll Bring:

• Current DoD 8570.01 IAT III certification
• Experience with AWS and cloud architecture design
• Experience with security tools and devices, including network firewalls, web proxy, intrusion prevention systems, vulnerability scanners, or penetration tools, or object-oriented programming languages, including Java or Python

Security Clearance Requirement: An active Secret security clearance is required for this position.