Dow - Cyber Security Engineer

cFocus Software seeks a Cyber Security Engineer to join our program supporting the Department of Defense (DoD). This position is remote. This position requires the ability a Public Trust clearance.

Qualifications:

• Bachelor’s degree in Cybersecurity, Information Assurance, Information Technology, or a related field.
• Minimum of 7 years of experience supporting cybersecurity for enterprise IT systems.
• Demonstrated experience with DoD RMF processes and ATO maintenance.
• Strong knowledge of NIST SP 800-53, NIST SP 800-171, and DoD cybersecurity requirements.
• Experience supporting vulnerability management, STIG compliance, and continuous monitoring.
• Familiarity with Agile and DevSecOps development environments.
• Strong analytical, documentation, and communication skills.
• Ability to obtain and maintain a Tier 3 (or higher) background investigation

Duties:

• Support and maintain the DSAID Authority to Operate (ATO) through RMF lifecycle activities.
• Implement, assess, and document NIST SP 800-53 and NIST SP 800-171 security controls.
• Develop and maintain System Security Plans (SSP), Security Assessment Reports (SAR), and Plans of Action and Milestones (POA&M).
• Conduct vulnerability scanning, security control assessments, and continuous monitoring activities.
• Support remediation of vulnerabilities identified through ACAS, STIGs, and security scans.
• Ensure compliance with DoD cybersecurity policies, Privacy Act requirements, and data protection standards.
• Coordinate with system owners, developers, DBAs, and operations staff to integrate security into system design and changes.
• Support security impact analyses for system enhancements, configuration changes, and vendor updates.
• Assist with incident response, cybersecurity reporting, and audit support.
• Support DevSecOps activities by embedding security practices into Agile development workflows.
• Ensure compliance with Section 508 requirements where applicable to system interfaces.
• Participate in technical reviews, security working groups, and Government meetings.
• Support transition-in, knowledge transfer, and sustainment activities.
• Develop and maintain cybersecurity documentation and standard operating procedures