About the Team:
The Security team at STR is comprised of highly skilled professionals who are responsible for maintaining compliance IAW with Government protocol and directives.
The Classified Cybersecurity (CCS) team consists of a collaborative group of ISSM’s, ISSO’s, and ISSE’s who are passionate about national security that take great pride in maintaining confidentiality, integrity, and availability of our systems.
The Role:
STR has an exciting opportunity for an ISSE to function as a key contributor for classified programs Cybersecurity/Risk Management Framework (RMF) posture in accordance with government directives and program requirements.
In this dynamic position you will interface and collaborate with other Cybersecurity professionals (ISSM’s, ISSO’s), Security professionals (CPSO’s, FSO’s), and System Administrators, on overall compliance and configuration change management.
Please note…this is not a remote and/or hybrid role and a requires you to be onsite.
Responsibilities:
- Conduct both vulnerability and compliance scans of Information Systems
- Support the development of Risk Management Framework (RMF) documentation and control validation testing for Authority to Operate (ATO) accreditations
- Support the development of cybersecurity requirements, design, and architecture
- Implement Information Assurance and Information Security protections and requirements in program development and execution environments
- Implement required security controls of networking devices, databases, operating systems, and hardware and software components
- Review/manage various IA Vulnerability Alerts (IAVA) (i.e., US-CERT, etc.) and overall remediation
- Assist ISSM’s and ISSO’s in monitoring and resolving Plan of Action and Milestones (POA&M) to mitigate system vulnerabilities
- Conduct reviews/technical inspections to identify and mitigate potential security weaknesses and ensure that all security features applied to a system are implemented and functional
- Support completion of Continuous Monitoring requirements IAW RMF and NIST SP800-53 requirements
- Perform other tasks as assigned by manager
Who you Are:
- This position requires an active Top Secret security clearance, with the ability to obtain an SAP and SCI access for which U.S. citizenship is needed by U.S. Government
- Two (2) to Five (5) years of technical (hands-on) experience related to Information Assurance/Cyber Engineering requirements, development, and implementation
- DoD 8570 IAM Level III certification (CISA, CISM, CISSP, etc.) or the ability to obtain within 6 months upon being hired
- Experience with NIST SP800-53 control implementation and assessment
- Familiarity with the DCSA Authorization and Assessment Process Manual (DAAPM) and the Joint Special Access Implementation Guide (JSIG)
- Experience with configuration/certification and auditing/analysis of Windows/Linux operating systems and system virtualization in peer-to-peer, LAN & WAN networks
- Experience with managing and implementing DISA STIGs and benchmarks in a variety of operations systems (Windows, Linux, Ubuntu)
- Experience with various IA vulnerability/compliance scanning tools (e.g., NMap, ACAS, Nessus, Security Content Automation Protocol (SCAP)
- Experience with maintaining/managing Security Incident and Event Management (SIEM) and centralized auditing tools (i.e., Splunk, PowerStrux)
- Familiarity with Microsoft Deployment Toolkit (MDT)
- Support hardening of new builds of Information Systems (IS) and ensure full functionality before deployment
- Familiarity with Windows and/or Linux scripting
- McAfee/Trellix ePO administration, to include familiarity with DLP components
- Detail oriented and self-motivated
- Excellent communication skills
- Ability to effectively prioritize multiple projects
- Ability to work with people in a team environment and deal effectively with changing project priorities
STR is a growing technology company with locations near Boston, MA, Arlington, VA, near Dayton, OH, Melbourne, FL, and Carlsbad, CA. We specialize in advanced research and development for defense, intelligence, and national security in: cyber; next generation sensors, radar, sonar, communications, and electronic warfare; and artificial intelligence algorithms and analytics to make sense of the complexity that is exploding around us.
STR is committed to creating a collaborative learning environment that supports deep technical understanding and recognizes the contributions and achievements of all team members. Our work is challenging, and we go home at night knowing that we pushed the envelope of technology and made the world safer.
STR is not just any company. Our people, culture, and attitude along with their unique set of skills, experiences, and perspectives put us on a trajectory to change the world. We can't do it alone, though - we need fellow trailblazers. If you are one, join our team and help to keep our society safe! Visit us at www.str.us for more info.
STR is an equal opportunity employer. We are fully dedicated to hiring the most qualified candidate regardless of race, color, religion, sex (including gender identity, sexual orientation and pregnancy), marital status, national origin, age, veteran status, disability, genetic information or any other characteristic protected by federal, state or local laws.
If you need a reasonable accommodation for any portion of the employment process, email us at [email protected] and provide your contact info.
Pursuant to applicable federal law and regulations, positions at STR require employees to obtain national security clearances and satisfy the requirements for compliance with export control and other applicable laws.
Top Skills
What the Team is Saying
What We Do
STR makes the world a safer place by developing technology and applying it to solve emerging national security challenges.
Why Work With Us
We believe in a people-first culture. Yes, we are scientists, engineers, and researchers, but first, we are people. Our environment is designed to foster innovation by encouraging our employees to work collaboratively on things they are passionate about. We also really like to have fun. We believe that working hard and playing hard go hand in hand.
Gallery
STR Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
