Security Engineer

Paragon Technology is seeking a Security Engineer to support the PEO-T contract for USTRANSCOM at Scott AFB, IL (onsite). The role provides technical support for vulnerability and risk assessment, network security, product evaluation, and security implementation, with delivery aligned to USTRANSCOM processes and Assessment & Authorization (A&A) reporting needs.

Responsibilities

• Review evolving NIST requirements to support risk assessment activities tied to affiliated system requirements and specifications, including execution, mapping, and compliance tracking.
• Develop detailed specifications to mitigate or remediate cybersecurity deficiencies found during risk assessments, and conduct follow-up risk assessments to promote secure coding practices and reinforce STIG and SRG implementation.
• Collaborate with government customers to develop appropriate POA&Ms and support risk acceptance activities as required for risk management processes.
• Design and implement solutions to protect the confidentiality, integrity, and availability of sensitive information.
• Provide technical evaluations of IT systems and support security improvements.
• Participate in information system contingency plan design to maintain appropriate protection levels and meet time requirements for minimizing operational impact to the customer organization.
• Conduct security product evaluations and recommend products, technologies, and upgrades to improve the organization’s security posture.
• Perform testing and review audit logs to evaluate the effectiveness of current security measures.
• Support team initiatives, including drafting deliverables and completing peer reviews of other products.

Requirements

• Experience developing or reviewing system authorization documentation (family plans and supplementary artifacts) in accordance with Department of War (DoW) implementation of the Risk Management Framework (RMF).
• Experience participating in Technical Interchange Meetings (TIMs) covering a wide range of Program Management Office (PMO) security engineering topics.
• Experience participating in acquisition program engineering milestone reviews.
• Experience coordinating with development contract personnel across Security, System Administration, System Engineering, and other supporting roles to identify, document, and plan for security enhancement requirements and resolve program security issues.
• Experience coordinating with inheritance providers (including enterprise teams in USTRANSCOM, SDDC, AMC, DISA Security Office, and others) to determine hybrid security requirements and establish appropriate inheritance relationships using provided tools.
• Experience performing security activities to maintain authorization for PMO programs, including categorization, control selection, evidence collection and audit, risk assessments, reporting, security impact assessments aligned to change management practices, Incident Response (IR) and Contingency Plan (CP) Exercise Support, FISMA Reporting, and Continuous Monitoring.
• Experience using the DoW Enterprise Mission Assurance Support Service (eMASS) system.
• Experience supporting alignment of PMO systems with applicable Executive Orders, Federal Policy, DoW regulations, USTRANSCOM requirements, and commercial best practices.
• Experience reviewing vulnerability scans using ACAS and Nessus, analyzing outputs to identify vulnerabilities, recommending mitigation and remediation actions, and ingesting actions into eMASS.
• Experience supporting government customer review of documented DISA STIGs/SRGs, providing technical feedback and recommendations, and ingesting final products into government-supplied tools to support risk assessment of NIST controls.
• Experience generating, sustaining, extending (when appropriate), and reporting POA&M status.
• Experience conducting and evaluating security testing activities, including security assessments and audits.
• Experience supporting operational security activities such as risk mitigation, host security, encryption, intrusion detection, VPN implementations, and viral detection.
• Experience with server and network device security lockdown and/or hardening.
• Ability to coordinate overall security strategy with multiple agencies and Authorizing Official (AO) representatives.
• Ability to coordinate with developers, vendors, and other government organizations/agencies to assess security engineering issues.
• Experience recommending changes to network and security architecture to improve security posture and meet operational performance requirements.
• US Citizenship with an active DoW Secret clearance or higher.
• Bachelor’s degree in Computer Science, Cybersecurity, or equivalent IT academic studies.
• Active IAM II certification in good standing, such as ISC2 CGRC (formerly CAP), CompTIA Security X (formerly CASP+CE), ISACA CISM, ISC2 CISSP (or associate), GIAC GSLC, or EC-Council CCISO.
• 1+ years of Security Engineering experience as ISSO/ISSM/SCA/Cyber Security Analyst/Engineer.

Technologies

• NIST
• ISCM
• STIG
• SRG
• Assessment & Authorization (A&A)
• Risk Management Framework (RMF)
• Plan of Action and Milestones (POA&Ms)
• DoW Enterprise Mission Assurance Support Service (eMASS)
• Assured Compliance Assessment Solution (ACAS)
• Nessus
• DISA STIGs/SRGs
• FISMA Reporting
• VPN

What Success Looks Like

• Clearly defined, traceable requirements that reflect validated operational needs.
• Well-facilitated stakeholder forums that drive timely decisions.
• Functional designs that enable development teams to deliver compliant, mission-aligned capabilities.
• Trust from government leadership as a reliable integrator across Services, Agencies, and functional domains.

How the Work Gets Done at Paragon

• Work is executed through disciplined collaboration, accountability to mission outcomes, and respect for government processes.
• Analysts lead with preparation and clarity, facilitate structured decision-making forums, and ensure requirements are governed, documented, and traceable from operational need through delivery.
• Focus is on predictable execution, transparency, and stewardship of government resources.

Working Conditions

• Work is primarily performed in a professional office or government facility environment.
• Position may require participation in classified discussions consistent with clearance level.
• Collaboration with geographically dispersed stakeholders is expected.
• Standard business hours with occasional schedule flexibility to support mission needs.

Role Details

• Title: Security Engineer
• Location: Scott AFB, IL (onsite)
• Salary: USD 78,000 - 101,000 per year
• Minimum Experience: 1+ years
• Education: Bachelor’s degree in Computer Science, Cybersecurity, or equivalent IT academic studies