Information System Security Engineer (ISSE)

Dark Wolf is seeking a Senior Cybersecurity Engineer to join a collaborative team to develop, manage, and maintain the security posture within a series of secure, air-gapped development enclaves with a focus on continuous exposure management, RMF lifecycle management, and Authorization to Operate (ATO) support. The successful candidate will support your team and customer through advanced technical evaluations, security controls development and implementation, and comprehensive ATO management ensuring high standards of security and compliance. This position requires TS/SCI eligibility and will be based out of the Omaha, Nebraska area with a full-time on-site requirement at Offutt AFB. Responsibilities include but are not limited to:

• Designing, testing, and implementing secure operating systems, networks, security monitoring, tuning and management of IT security systems and applications, incident response, digital forensics, loss prevention, and eDiscovery actions.
• Conducting risk and vulnerability assessment at the network, system and application level.
• Leveraging AI-assisted RMF tools to ingest system documentation and post-deployment playbooks to rapidly identify compliance gaps, accelerating the ATO process.
• Supporting continuous exposure management and ATO workflows to maintain real-time system authorization.
• Coordinating proper security control implementation with system administrators and engineers.
• Developing and implementing security controls and formulating operational risk mitigations along with assisting in security awareness programs.
• Involved in a wide range of security issues including architectures, firewalls, electronic data traffic, and network access.
• Performing analyses to validate established security requirements and recommending additional security requirements and safeguards. 
• Supporting the formal Security Test and Evaluation (ST&E) required by each government accrediting authority through pre-test preparations, participation in the tests, analysis of the results, and preparation of required reports.
• Periodically conducting a review of each system's audits and monitoring corrective actions until all actions are closed.
• Supporting cyber metrics development, maintenance and reporting.
• Providing briefings to senior staff.

Required Qualifications 

• 7+ years of relevant experience in Cybersecurity
• 7+ years of experience validating security controls within systems by utilizing scanning tools, configuration reviews, and manual testing 
• 7+ years of experience utilizing the Risk Management Framework in support of obtaining a Authority to Operate 
• Proficiency in drafting and auditing System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms) that clearly explain risk to non-technical stakeholders
• Ability to "translate" between the developers (who have the data) and the formal cybersecurity leadership (who needs the data).
• Experience translating technical configurations into "audit-ready" evidence for Governance, Risk, and Compliance (GRC) tools like eMASS or ServiceNow.
• Hands-on with eGRC tools like: eMASS, XACTA, RSA Archer, etc.
• Ability to clearly articulate ideas for executive level consumption
• Ability  to use prior experience and knowledge to address new situations; especially during interactions with clients
• Ability  to use prior experience and knowledge to seamlessly incorporate new knowledge or information during client interactions
• Must have IAT II Certification
• B.A. or B.S. Information Security, Computer Science  or related discipline
• US Citizenship and Top Secret Security Clearance with SCI eligibility