Jr. Cyber Security Engineer

By Light Professional IT Services LLC supports DoD-focused software teams with cybersecurity engineering that fits into real development workflows. This onsite role in Orlando, FL offers a benefits package designed to support your health, growth, and life outside of work.

Benefits

• Medical, Dental & Vision Coverage
• Wellness Program
• 401(k) Matching
• Disability (Short Term & Long Term)
• Employee Assistance Program
• Life Insurance
• Education & Training
• Generous Leave Policy (11 Federal Holidays, PTO, Military Leave, Bereavement and Jury Duty)

Position Overview

Provide cybersecurity engineering support to DoD software application development activities through cybersecurity requirements definition, process enhancements, and application security testing. The work includes defining requirements, performing compliance and adversarial assessments, proposing mitigations, and interfacing with software development teams across the system development lifecycle.

Responsibilities

• Define cybersecurity requirements for software applications to meet program requirements and objectives.
• Recommend security engineering practices to incorporate throughout the system development lifecycle.
• Assess cybersecurity requirement compliance using manual and automated software analysis tools and methods, and present findings to the customer as necessary.
• Conduct assessments using adversarial tools, techniques, and methods against network-enabled and web applications to identify weaknesses, gaps, and vulnerabilities.
• Propose mitigation and countermeasures to reduce or eliminate software-level threats.
• Interface directly with the software development team to ensure software security engineering principles are applied throughout the system development lifecycle.

Requirements

• Bachelor's Degree in Computer Science, Engineering, Cybersecurity, IT or related field required; professional and/or military experience may be substituted in lieu of degree.
• This position requires certifications necessary to meet IAT Level II in accordance with DoD 8140 baseline certifications.
• IAT Level II certification is required immediately upon hire.
• Maintain current certification status by obtaining continuing education as specified by the certification authority.
• Experience in software engineering, development and/or systems engineering throughout all phases of the system development lifecycle.
• Systems administration skills, including experience with Linux, security settings, services, and hardening of systems (STIGs, security policies); any shell scripting or Python is a plus.
• System troubleshooting, recovery, and advisory in the event of unexpected adverse configuration changes.
• Knowledge of threat assessment and solutions to mitigate or eliminate such threats.
• Experience with offensive security tools and adversarial techniques and methods.
• Experience implementing software application solutions to comply with NIST SP 800-53 security controls.
• Compliance and vulnerability reporting and similar formal technical documentation skills.
• Understanding of Risk and Compliance Frameworks.

Preferred Experience/Qualifications

• An understanding of DoD acquisition processes and relevant cyber security processes, such as the Risk Management Framework (RMF).
• Security+ certification.

Security Clearance / Special Requirements

• U.S. Citizenship status with a current SECRET security clearance, with the ability to attain a TOP SECRET/SCI clearance.
• Security Clearance requirements will be specified in the Government's Task Order.
• On-site role; travel may be required (less than 10%).

Technologies: Linux, STIGs, security policies, shell scripting, Python, NIST SP 800-53