Job description

Dark Wolf is seeking a Senior Cybersecurity Engineer to join a collaborative team to develop, manage, and maintain the security posture within a series of secure, air-gapped development enclaves with a focus on continuous exposure management, RMF lifecycle management, and Authorization to Operate (ATO) support. The successful candidate will support your team and customer through advanced technical evaluations, security controls development and implementation, and comprehensive ATO management ensuring high standards of security and compliance. This position requires TS/SCI eligibility and will be based out of the Omaha, Nebraska area with a full-time on-site requirement at Offutt AFB. Responsibilities include but are not limited to: Designing, testing, and implementing secure operating systems, networks, security monitoring, tuning and management of IT security systems and applications, incident response, digital forensics, loss prevention, and eDiscovery actions. Conducting risk and vulnerability assessment at the network, system and application level. Leveraging AI-assisted RMF tools to ingest system documentation and post-deployment playbooks to rapidly identify compliance gaps, accelerating the ATO process. Supporting continuous exposure management and ATO workflows to maintain real-time system authorization. Coordinating proper security control implementation with system administrators and engineers. Developing and implementing security controls and formulating operational risk mitigations along with assisting in security awareness programs. Involved in a wide range of security issues including architectures, firewalls, electronic data traffic, and network access. Performing analyses to validate established security requirements and recommending additional security requirements and safeguards. Supporting the formal Security Test and Evaluation (ST&E) required by each government accrediting authority through pre-test preparations, participation in the tests, analysis of the results, and preparation of required reports. Periodically conducting a review of each system's audits and monitoring corrective actions until all actions are closed. Supporting cyber metrics development, maintenance and reporting. Providing briefings to senior staff. Required Qualifications 7+ years of relevant experience in Cybersecurity 7+ years of experience validating security controls within systems by utilizing scanning tools, configuration reviews, and manual testing 7+ years of experience utilizing the Risk Management Framework in support of obtaining a Authority to Operate Proficiency in drafting and auditing System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms) that clearly explain risk to non-technical stakeholders Ability to "translate" between the developers (who have the data) and the formal cybersecurity leadership (who needs the data). Experience translating technical configurations into "audit-ready" evidence for Governance, Risk, and Compliance (GRC) tools like eMASS or ServiceNow. Hands-on with eGRC tools like: eMASS, XACTA, RSA Archer, etc. Ability to clearly articulate ideas for executive level consumption Ability to use prior experience and knowledge to address new situations; especially during interactions with clients Ability to use prior experience and knowledge to seamlessly incorporate new knowledge or information during client interactions Must have IAT II Certification B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and Top Secret Security Clearance with SCI eligibility This position will be an on-site based out of Omaha. NE. The salary range for this position is estimated to be between 130,000.00 - $155,000.00, commensurate on experience and technical skillset. We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role. We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.

Requirements

Must-haves

Conducting risk and vulnerability assessment at the network, system and application level.
Leveraging AI-assisted RMF tools to ingest system documentation and post-deployment playbooks to rapidly identify compliance gaps, accelerating the ATO process.
Supporting continuous exposure management and ATO workflows to maintain real-time system authorization.
Coordinating proper security control implementation with system administrators and engineers.
Developing and implementing security controls and formulating operational risk mitigations along with assisting in security awareness programs.
Involved in a wide range of security issues including architectures, firewalls, electronic data traffic, and network access.
Performing analyses to validate established security requirements and recommending additional security requirements and safeguards.
Periodically conducting a review of each system's audits and monitoring corrective actions until all actions are closed.
Supporting cyber metrics development, maintenance and reporting.
Providing briefings to senior staff.
7+ years of relevant experience in Cybersecurity
7+ years of experience validating security controls within systems by utilizing scanning tools, configuration reviews, and manual testing
7+ years of experience utilizing the Risk Management Framework in support of obtaining a Authority to Operate
Proficiency in drafting and auditing System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms) that clearly explain risk to non-technical stakeholders
Ability to "translate" between the developers (who have the data) and the formal cybersecurity leadership (who needs the data).
Experience translating technical configurations into "audit-ready" evidence for Governance, Risk, and Compliance (GRC) tools like eMASS or ServiceNow.
Hands-on with eGRC tools like: eMASS, XACTA, RSA Archer, etc.
Ability to clearly articulate ideas for executive level consumption
Ability to use prior experience and knowledge to address new situations; especially during interactions with clients
Ability to use prior experience and knowledge to seamlessly incorporate new knowledge or information during client interactions
Must have IAT II Certification
B.A. or B.S. Information Security, Computer Science or related discipline
US Citizenship and Top Secret Security Clearance with SCI eligibility
We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: greenhouse
Effort: quick