AttackIQ Engineer

Job Summary

FRC is seeking a Cybersecurity / AttackIQ Engineer to support DISA's enterprise Automated Security Validation program. The engineer will implement, configure, administer, integrate, and sustain the AttackIQ platform; develop MITRE ATT&CK-aligned cybersecurity assessments; validate endpoint and network security controls; integrate AttackIQ with SIEM, SOAR, EDR and related cybersecurity technologies; analyze assessment results; support remediation validation; and provide Tier II/Tier III technical support and customer training. 

Candidates must be U.S. citizens and possess an appropriate DoD security clearance. Secret clearance is required for general program support, while selected engineering and assessment activities require Top Secret/SCI eligibility. The position includes classified work at Fort Meade and other approved DoD facilities, periodic CONUS/OCONUS travel, and after-hours response for priority incidents.

Primary Responsibilities

• Install, configure, integrate, and maintain the AttackIQ platform and associated components
• Configure and execute security validation assessments using AttackIQ
• Apply the MITRE ATT&CK framework and adversary tactics, techniques, and procedures (TTPs) to validation activities
• Analyze validation results and help identity gaps and opportunities to improve security controls and detection capabilities
• Integrate AttackIQ with applicable enterprise security technologies and workflows
• Troubleshoot platform, network, endpoint, authentication, and integration issues
• Work with security operations, network security, endpoint security, vulnerability management, and other technical teams
• Develop technical documentation and provide training and knowledge transfer to customer personnel

Required Knowledge, Skills, and Abilities

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field OR equivalent professional experience
• 3-5 years of experience in cybersecurity engineering, security operations, security consulting, network security, systems engineering, or a related role
• Experience deploying or managing enterprise cybersecurity technologies such as firewalls, EDR, SIEM, vulnerability managements, IDS/IPS, VPNs, or security proxies
• Working knowledge of enterprise networking, including TCP/IP, routing, switching, DNS, firewalls, and network segmentation
• Familiarity with security testing, security control validation, detection engineering, SOC/blue-team operations, or similar functions
• Understanding of the MITRE ATT&CK framework and common adversary TTPs
• Strong troubleshooting, problem solving, communication, and documentation skills

Preferred Knowledge, Skills, and Abilities

• Hands on experience with AttackIQ
• Experience with breach and attack simulations (BAS), automated security validation, adversary emulation, or penetration testing technologies
• Experience with scripting or automation using Python, PowerShell, Bash, or REST APIs
• Experience supporting government, defense, or other highly regulated environments
• Relevant cybersecurity certifications such as Security+, CySA+, CISSP, or GIAC

Additional  Requirements

• Must meet applicable customer security, access, background investigation, and credentialing requirements
• Employment for this position is contingent upon contract award and/or executive, funding, and satisfaction of applicable customer access and security requirements

Physical Requirements

• Prolonged periods of sitting at a desk and working on a computer
• Must be able to lift 15 pounds at times