BluestoneLogic

Security Engineer

• Work closely with the government Information Systems Security Manager (ISSM) to implement the Risk Management Framework (RMF).
• Establish and maintain security controls compliance and artifacts in Enterprise Mission Assurance Support Service (eMASS) for Authorization to Operate (ATO) accreditation.
• Perform vulnerability and risk analyses of computer systems and applications during all phases of the system development life cycle.
• Conduct advanced cybersecurity engineering, risk management, and DoD RMF compliance activities.
• Monitor and analyze security events using ACAS, eMASS, CMRS, HBSS/ESS, Splunk, SIEM tools, and other cybersecurity monitoring solutions.
• Ensure compliance with DoD cybersecurity frameworks, including NIST 800-53, NIST 800-207 (Zero Trust Architecture), and DISA STIGs.
• Integrate security best practices within Agile and DevSecOps environments.
• Secure both classified and unclassified DoD networks in compliance with DISN and SIPRNet security policies.
• Generate system-level security documentation and support the development of Standard Operating Procedures.
• Participate in security audits and develop recommendations for remediation.
• Engage customer cybersecurity stakeholders to understand needs and define acceptance criteria for validating cybersecurity controls.
• Plan and lead projects; mentor and guide other cybersecurity engineers.

Senior Cybersecurity Engineer