onsite
Cybersecurity Engineer - Assessment & Authorization A&A - Loesung LLC
Security Engineer
Cybersecurity Engineer focused on DoD/DoN systems, driving Assessment & Authorization (A&A) to secure ATO/ATC certifications using RMF, vulnerability management, incident response, and continuous monitoring practices.
About the role
Key Responsibilities
- Lead risk assessments for DoD and DoN information systems, identifying vulnerabilities and cyber protection needs.
- Develop and maintain RMF documentation, including System Security Plans, hardware/software inventories, topology diagrams, and PPS.
- Create and update vulnerability management, incident response, and contingency plans to support ATO/ATC certification.
- Coordinate with stakeholders to implement system POA&M and ensure timely remediation of identified risks.
- Support Information Security Continuous Monitoring (ISCM) activities, providing regular status reports and compliance evidence.
Requirements
- Strong understanding of DoD RMF processes and ATO/ATC certification requirements.
- Experience with vulnerability assessment tools, incident response frameworks, and continuous monitoring solutions.
- Excellent documentation skills and ability to produce clear, concise security plans and reports.
- Proficiency in creating system topology diagrams and maintaining hardware/software inventories.
- Effective communication skills to collaborate with cross‑functional teams and present findings to senior leadership.