As a Sr. Cybersecurity Engineer I, you will support a government program by applying NIST SP 800-53 controls, monitoring security posture, analyzing vulnerabilities, and coordinating remediation across AWS, applications, APIs, and infrastructure. The role also includes junior Business Analyst and Project Manager responsibilities, such as defining security requirements, facilitating stakeholder discussions, tracking action items, and reporting progress.
We know that you can’t have great technology services without amazing people. At MetroStar, we are obsessed with our people and have led a two-decade legacy of building the best and brightest teams. Because we know our future relies on our deep understanding and relentless focus on our people, we live by our mission: A passion for our people. Value for our customers.
If you think you can see yourself delivering our mission and pursuing our goals with us, then check out the job description below!
What you’ll do:
- Communicate regularly with DHS customers and internal engineering teams to lead required RMF process/steps to assess and authorize a system obtaining and maintaining a full ATO (Authority to operate).
- Perform monthly continuous monitoring reporting to include analysis of scans, logs, accounts, etc.
- Support writing and reviewing of Risk Management Framework (RMF) documentation packages to support risk assessments.
- Design and execute the security testing plan of all requirements and analysis required to complete a RMF package document for submittal and approval.
- Use vulnerability scanning tools and frameworks to evaluate the security posture of a system.
- Assist the customer in preparing training and table top exercises for contingency planning, incident response and disaster recovery.
- Complete ISSO USCIS provided training as required.
What you’ll need to succeed:
- Minimum of five years of IT experience as a Security Lead or Information Security Analyst, including evaluation, implementation, or management of security practices for new and existing technologies.
- Bachelor’s degree in Computer Science or a comparable field, or equivalent experience.
- Strong understanding of NIST SP 800-53 controls and their application within the RMF.
- Strong understanding of API-based security mechanisms and the OWASP framework for web application vulnerabilities. Hands-on implementation is not required.
- Experience with AWS architecture and a technical understanding of cloud technologies used in customer environments, including microservices, containers, zero trust concepts, data streaming, or data pipelines.
- Experience conducting continuous monitoring, preparing monthly status reports, and analyzing and reporting cybersecurity vulnerability scan results.
- Experience assessing the risk of deficiencies identified during RMF control testing and tracking corrective actions.
- Experience with requirements analysis, security architecture and design, and documentation of cybersecurity or information security solutions.
- Experience using cybersecurity tools or scanners to evaluate system security posture, including scanning or reporting for web applications, databases, containers, or other system components.
- Working knowledge of Agile and DevSecOps practices and cybersecurity, network, systems, and software engineering principles.
- Ability to gather requirements, coordinate stakeholders, facilitate meetings, and track security work through completion.
- Ability to obtain and maintain DHS suitability
- An ISSO-relevant professional certification.
SALARY RANGE: $100,000.00 - $125,000.00
The salary range for this position is determined based on qualifications, skills, and relevant experience. The final salary offered will be determined based on several factors including:
- The candidate's professional background and relevant work experience
- The specific responsibilities of the role and organizational needs
- Internal equity and alignment with current team compensation
- This role is also eligible for additional compensation, subject to the terms and policies of MetroStar, which may include:
- Performance-based bonuses
- Company-paid training and/or certifications
- Referral bonuses
Application Deadline: Applications will be accepted on a rolling basis until the position is filled; candidates are encouraged to apply as early as possible for full consideration.
Additional Compensation: This role may also be eligible for bonuses and/or additional incentives based on individual and company performance.
Benefits: All full-time employees are eligible to participate in our benefits programs:
- Health, dental, and vision insurance
- 401(k) retirement plan with company match
- Paid time off (PTO) and holidays
- Parental Leave and dependent care
- Flexible work arrangements
- Professional development opportunities
- Employee assistance and wellness programs
Like we said, we are big fans of our people. That’s why we offer a generous benefits package, professional growth, and valuable time to recharge. Learn more about our company culture code and benefits. Plus, check out our accolades.
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment based on merit and without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.
What we want you to know:
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
Not ready to apply now?
Sign up to join our newsletter here.
Skills Required
- At least five years of IT experience as a Security Lead or Information Security Analyst, including evaluating, implementing, or managing security practices.
- Bachelor’s degree in Computer Science or a comparable field, or equivalent experience.
- Strong understanding of NIST SP 800-53 controls and their application within the Risk Management Framework.
- Strong understanding of API-based security mechanisms and the OWASP framework for web application vulnerabilities.
- Experience with AWS architecture and cloud technologies, including microservices, containers, zero trust concepts, data streaming, or data pipelines.
- Experience conducting continuous monitoring, preparing monthly status reports, and analyzing and reporting cybersecurity vulnerability scan results.
- Experience assessing risks from RMF control-testing deficiencies and tracking corrective actions.
- Experience with requirements analysis, security architecture and design, and cybersecurity solution documentation.
- Experience using cybersecurity tools or scanners to evaluate web applications, databases, containers, or other system components.
- Working knowledge of Agile, DevSecOps, cybersecurity, network, systems, and software engineering principles.
- Ability to gather requirements, coordinate stakeholders, facilitate meetings, and track security work through completion.
- Ability to obtain and maintain DHS suitability.
- An ISSO-relevant professional certification.
What We Do
MetroStar is a digital services and management consulting company specializing in emerging technologies within the public sector. MetroStar is a mission accelerator - we embrace disruptions in tech to propel progress. Through our user-centric capabilities, we create new paths to government innovation and shape thoughtful outcomes for the people.
