Continuous Monitoring Engineer

AGE Solutions is looking for a Continuous Monitoring Engineer to join our team in support of an upcoming cybersecurity risk management and assessment program with our DoD customer.

In this role, you'll be responsible for overseeing and monitoring DISA authorized IT systems (re-authorization and new systems) throughout their life cycle for changes that may impact the security posture of the system. This shall be achieved by analyzing proposed or actual changes to IT systems to determine the security impact and periodically assessing security controls and their effectiveness.

Individuals in this role must be available to work on-site at Ft. Meade, MD for the majority of the workweek.

Responsibilities Include:

• Utilize Qmulos, Splunk, ACAS, Axonius, CheckMark, BURP, and ESS to assess, validate, and monitor enterprise and system-level security controls.
• Develop and maintain the DISA RE5 ConMon Strategy to support the A&A mission.
• Create and update the DISA RE5 ConMon SOP, detailing oversight and monitoring requirements for IT systems throughout their lifecycle.
• Conduct continuous security control assessments for all ISs under the organization's purview.
• Perform automated and manual monitoring, generating weekly security control status reports using live data from security tools.
• Ensure ConMon-related controls are properly implemented in RMF packages within eMASS.
• Conduct ongoing assessments in compliance with industry auditor standards to monitor security, vulnerabilities, and threats.
• Report system risk status using the DISA-approved reporting tool.
• Maintain the ConMon Dashboard, tracking compliance, POA&M status, CMRS visibility, asset management, FISMA reviews, and annual validations.
• Track automated and manual security controls, identifying overdue assessments and validations.
• Coordinate with system administrators, ACAS administrators, and HBSS administrators to resolve credentialing and data issues.
• Provide real-time IS security status metrics based on the ConMon Strategy and SOP.
• Notify the Government within 60 minutes of security posture changes that negatively impact a system.

Requirements:

• Bachelor's degree (IT-related field preferred)
• Five (5) years of overall experience in cybersecurity or network security position
• Have an active DoD Top Secret clearance
• DoD 8570 IAM/IA Technical (IAT) Level II certification
• Proficiency in one or more of the following tools: Qmulos, Splunk, ACAS, Axonius, CheckMark, BURP, and HBSS
• Understanding of the RMF process, NIST SP 800- 37, NIST SP 800-53, CNSSI 1253
• Experience in developing, implementing, and conducting a continuous monitoring program for a large organization.
• Proficiency in security architecture, system hardening, vulnerability management, and intrusion detection/prevention
• Strong written and oral presentation skills
• Customer service skills

Compensation: $115,000 - $125,000