Software Engineer - STIG Engineer

Life at Capgemini

Capgemini supports all aspects of your well-being throughout the changing stages of your life and career. For eligible employees, we offer:

• Flexible work
• Healthcare including dental, vision, mental health, and well-being programs
• Financial well-being programs such as 401(k) and Employee Share Ownership Plan
• Paid time off and paid holidays
• Paid parental leave
• Family building benefits like adoption assistance, surrogacy, and cryopreservation
• Social well-being benefits like subsidized back-up child/elder care and tutoring
• Mentoring, coaching and learning programs
• Employee Resource Groups
• Disaster Relief

World leader in engineering and R&D services, Capgemini Engineering combines its broad industry knowledge and cutting-edge technologies in digital and software to support the convergence of the physical and digital worlds. Coupled with the capabilities of the rest of the Group, it helps clients to accelerate their journey towards Intelligent Industry. Capgemini Engineering has more than 55,000 engineer and scientist team members in over 30 countries across sectors including Aeronautics, Space, Defense, Naval, Automotive, Rail, Infrastructure & Transportation, Energy, Utilities & Chemicals, Life Sciences, Communications, Semiconductor & Electronics, Industrial & Consumer, Software & Internet.

Capgemini Engineering is an integral part of the Capgemini Group, a global leader in partnering with companies to transform and lead their business by harnessing the power of technology. The Group is guided every day by its purpose of igniting human energy through technology for an inclusive and balanced future. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering, all motivated by its market leading capabilities in AI, cloud and data, combined with its deep industry expertise and partner ecosystem. The Group reported 2023 global revenues of 22.5 billion.

Capgemini discloses salary range information in compliance with state and local pay transparency obligations. The disclosed range represents the lowest to highest salary we, in good faith, believe we would pay for this role at the time of this posting, although we may ultimately pay more or less than the
disclosed range, and the range may be modified in the future. The disclosed range takes into account the wide range of factors that are considered in making compensation decisions including, but not limited to, geographic location, relevant education, qualifications, certifications, experience, skills, seniority,

performance, sales or revenue-based metrics, and business or organizational needs. At Capgemini, it is not typical for an individual to be hired at or near the top of the range for their role. The base salary range for the tagged location is $101,011 - $158,550. This role may be eligible for other compensation including variable compensation, bonus, or commission. Full time regular employees are eligible for paid time off, medical/dental/vision insurance, 401(k), and any other benefits to eligible employees.

Get the Future You Want |

Capgemini is an Equal Opportunity Employer encouraging diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race, national origin, gender identity/expression, age, religion, disability, sexual orientation, genetics, veteran status, marital status or any other characteristic protected by law.

This is a general description of the Duties, Responsibilities and Qualifications required for this position. Physical, mental, sensory or environmental demands may be referenced in an attempt to communicate the manner in which this position traditionally is performed. Whenever necessary to provide individuals with disabilities an equal employment opportunity, Capgemini will consider reasonable accommodations that might involve varying job requirements and/or changing the way this job is performed, provided that such accommodations do not pose an undue hardship.

Capgemini is committed to providing reasonable accommodations during our recruitment process. If you need assistance or accommodation, please reach out to your recruiting contact.

Click the following link for more information on your rights as an Applicant

Please be aware that Capgemini may capture your image (video or screenshot) during the interview process and that image may be used for verification, including during the hiring and onboarding process.

Applicants for employment in the US must have valid work authorization that does not now and/or will not in the future require sponsorship of a visa for employment authorization in the US by Capgemini.

Software Engineer - STIG

Responsibilities
STIG Implementation: Apply DOD Security Technical Implementation Guides (STIGs) to various Windows and Linux-based operating systems according to the specific requirements of each client's environment.
Security Assessment: Conduct comprehensive security assessments to identify system vulnerabilities, risks, and potential non-compliance issues with DOD standards.
Remediation: Work closely with engineers and product security to remediate identified security issues and ensure the successful implementation of STIGs.
Documentation: Maintain detailed documentation of the STIG implementation process, including pre and post-assessment reports, security measures applied, and any necessary configuration changes.
Reporting: Provide regular status updates to project stakeholders, management, and clients, outlining progress, challenges, and outcomes of STIG application efforts.
Compliance Assurance: Verify and validate the effectiveness of STIG implementations and ensure that systems comply with DOD security guidelines.
Research and Stay Updated: Keep abreast of the latest DOD STIG updates, industry best practices, and emerging security trends to continuously improve the implementation process.
Collaboration: Collaborate with cross-functional engineering teams to achieve successful STIG application and documentation.

Required skills:
4 years experience in applying DOD Security Technical Implementation Guides (STIGs) to Windows and Linux-based operating systems.
Comprehensive understanding of DOD security standards and their implications on system configurations.
Knowledge of various security tools and technologies used in security assessments and compliance verification.
Strong analytical and problem-solving skills to identify security gaps and recommend appropriate solutions.
Proficiency in software or scripting language for tasks in Windows and or Linux (IE: powershell, bash, python, c#, rust, c )
Excellent documentation skills to create detailed reports and maintain accurate records of STIG implementations.
Ability to communicate effectively with technical and non-technical partners.
Industry certifications such as CISSP, CompTIA Security , or other relevant certifications would be an advantage.
This position requires access to export-controlled commodities, technical data, technology, software, and services governed by the International Traffic in Arms Regulations (ITAR). Due to contractual limitations and ITAR obligations associated with this role, U.S. citizenship, U.S. legal permanent resident status, or protected person status under 8 U.S.C. 1324b(a)(3) is required.
Ability to meet customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud Background Check upon hire/transfer and every two years thereafter.

Desirable skills
Azure and Azure DevOps
Working with the US Military or other government contracts
Augmented or Virtual Reality

STIG, DOD Security Technical Implementation Guides, DOD security Standards, Scripting Languages