1215 - Mid-Level Cybersecurity Engineer

Sigma Defense is seeking a Mid-Level Cybersecurity Engineer to Interface between DevSecOps Engineers and client Cybersecurity team. The hired candidate will support DevSecOps and Software Engineers in developing secure platforms and effectively communicating regarding the risk posture of the platform.

Equal Opportunity Employer/Veterans/Disabled: Sigma Defense Systems is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

Requirements

• 2-5 years of relevant experience.
• Knowledge of DoD Cybersecurity Risk Management Framework and Requirements.
• Experience Developing and implementing security into infrastructure, platforms, or software.
• Experience applying CNSSI 1253 and NIST SP 800 series standards.
• Experience with DISA Security Technical Implementation Guides (STIG).
• Understanding of Cybersecurity threats and countermeasures.
• Experience with web-based Assessment and Authorization platforms (eMASS, Xacta, Archer).
• Experience using Visio and StigViewer.
• Ability to work Independently within a cross-functional team.
• Must be a U.S. Citizen.

Personnel Clearance Level:

• Candidate must possess or have the ability to obtain an active Top Secret security clearance or higher.
• Clearance will be sponsored for the right candidate.

Education Requirements:

• Bachelor's degree from an accredited college or university in Cybersecurity or related field of study.

Essential Job Duties (not all-inclusive)

• Support DevSecOps and Software Engineers in developing secure platforms and effectively communicating regarding the risk posture of the platform.
• Establish communication mechanisms working with the customer.
• Communicate regularly and meet virtually with customer POCs.
• Work with the customer's cybersecurity team to resolve comments.
• Provide evidentiary artifacts of scanning/reporting/remediation for container images.
• Contribute to container governance policy development, particularly in the areas of configuration management and vulnerability management.
• Submit cybersecurity Change Requests using the customer's procedures and templates.
• Evaluate risk for applications based on the customer's network security plan.
• Evaluate compliance with the Application Security and Development STIG for software assets and environments such as:
• Classified/Unclassified Applications
• Container Orchestration Platform
• Gitlab
• Jira
• Confluence
• SonarQube
• Artifactory

Salary Range: $110,000 - $125,000 annually.

Benefits

• Dental and Vision Insurance

• Medical Insurance to Include HSA, FSA, and DFSA Plans
• Life and AD&D coverage
• Employee Assistance Program (EAP)
• 401(k) Plan with Company Matching Contributions
• 160 Hours of Paid Time Off (PTO)
• 12 (Floating) Holidays
• Educational Assistance
• Highly Competitive Salary