Cybersecurity Engineer, Principal (ISSE)

Cybersecurity Engineer, Principal (ISSE)

LOCATION: Kettering, OH (Remote)

JOB STATUS: Full-Time

CLEARANCE: Active T3 / Secret

TRAVEL: 0-10%

Astrion has an exciting opportunity for a Cybersecurity Engineer, Principal (ISSE) supporting the EPASS GB contract. As part of AFLCMC/GB in the Business and Enterprise Systems Directorate (BES), the FLITES program is a new Air Force system designed to manage Item Master data. FLITES will deliver Item Catalog and Provisioning functions, replacing legacy systems such as IMCS. It will serve as the central repository for Item core business objects, standardizing cataloging processes, structure, attributes, propagation, and views across all Item types.

Required Qualifications:

- U.S. Citizenship

- Bachelor's degree in a related field and 10 years of experience in the technical/professional discipline performed.

- Experience providing guidance on: Access control, Configuration management, System and communications protection, Contingency planning, Incident handling, System and information integrity.

- Security/privacy training and awareness; software development activities/tools related to cybersecurity.

- Experience performing cybersecurity duties per DoWI 8500.01, AFI 17-130, and AFI 17-1301.

- Experience validating/evaluating/analyzing results using automated testing tools (Fortify, Checkmarx, SonarQube, AppScan).

- Experience using DoW tracking systems (Jira, HP ALM, eMASS).

- Experience conducting ISCM activities.

- Must meet DCWF Information Systems Security Developer (631) principal level certifications: FITSI FITSP-D (required), GIAC GCSA, (ISC)2 CISSP-ISSEP.

- Must have and maintain active T3/Secret clearance.

Preferred Qualifications:

- Certified Scrum Master

- Other Agile certifications

- Working knowledge of Agile development methodology

- Experience with tools: CheckMarx, SonarQube, Mavin, Fortify, Jira, Confluence, BitBucket

Responsibilities:

- Provide cybersecurity support per DoWI 8500.01.

- Assess and monitor cybersecurity risk ensuring adherence to RMF, CSF, NIST, ISCM strategy.

- Implement security controls using secure engineering and coding best practices.

- Coordinate activities with ISSM, ISSO, ISO, architect, common control provider.

- Maintain certifications IAW AFI 17-1303 and AFMAN 17-1303.

- Ensure documentation is current.

- Support ATO/ATC and POA&M corrective actions.

- Develop ISCM strategy and monitor system/environment changes.

- Continuously monitor systems for security events.

- Assess configuration changes for cybersecurity impact.

- Evaluate security control performance.

- Report security-relevant events/changes impacting authorization.

- Ensure ISSOs/privileged users maintain training/certifications.

- Ensure AF IT is acquired, documented, operated, maintained, and disposed of properly per DoWI 5000.02 and DoWI 8510.01.