Cybersecurity Journeyman

Cybersecurity Journeyman
Cybersecurity, Journeyman
Hanscom Air Force Base
Bedford, Massachusetts

HX5 is an award-winning provider of engineering, research and development, and technical services to clients such as NASA and the Department of Defense. Founded in 2004, HX5 is a fast-growing veteran- and woman-owned company with locations nationwide.

HX5 is currently seeking a Cybersecurity Engineer Journeyman to support the Air Force Life Cycle Management Center/PEO Digital Directorate (AFLCMC/HB) at Hanscom Air Force Base, located in Bedford, MA.

Essential Duties and Responsibilities:

• Assist with development of System Security Management Plans, Program Protection Plans, Security Risk Analyses, OPSEC Plans, Computer Certification and Accreditation, Security Vulnerability and Countermeasures Analyses, Security Concepts of Operations, and other system security engineering-related documents identified in MIL-STD 1785, DoDI 5000.02, Operation of the Adaptive Acquisition Framework, and DoDI 8510.01
• Support the system/application Authorization and Accreditation (A&A) effort to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and Air Force policies (i.e., Risk Management Framework (RMF)
• Update, monitor, and manage information in systems for the program office
• Process and manage system user account requests and process tools
• Process and manage system port/protocol and access control list requirements
• Process and manage system Public Key Infrastructure (PKI) identification and authorization requirements
• Manage the distribution, implementation, remediation, and tracking of system security updates and configurations as required by the DoD
• Recommend policies and procedures to ensure information systems reliability and accessibility to prevent and defend against unauthorized access to systems, networks, and data
• Conduct risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risk, and protection needs
• Promote awareness of security issues among management and ensuring sound security principles are reflected in organizations’ vision and goals
• Conduct systems security evaluations, audits, and reviews
• Recommend systems security contingency plans and disaster recovery procedures
• Recommend and implementing programs to ensure that systems, network, and data users are aware of, understand, and adhere to systems security policies and procedures
• Participate in network and systems design to ensure implementation of appropriate systems security policies
• Recommend initial, or updates to, software and configurations to new or existing system security mechanisms
• Obtain waivers to mandated security mechanisms/policies which would be detrimental to system performance and impact the system’s mission
• Facilitate the gathering, analysis and preservation of evidence used in the prosecution of computer
• Provide leadership assistance in the analysis of the design, development, integration, implementation and testing of cybersecurity requirements
• Develop risk-based strategies to address identified gaps
• Review, analyze, and assess implementations of cybersecurity (i.e.  RMF security controls) throughout the open systems architecture and associated services, derived requirements specifications, design documents & design implementation
• Collaborate with stakeholders (Government and commercial) to ensure the system is approved by all Authorizing Officials via the RMF A&A process
• Provide technical advice in the area of systems security across all systems and supports
• Develop recommendations for the Government regarding how well designs satisfy current requirements and business goals
• Maintain databases that reflect receipt, storage, inventory, and disposition of classified information to include data entry, updates, and generation of reports
• Support Government program office in audits of Government classified holdings to ensure proper accountability
• Maintain databases of classified visits and clearance levels
• Perform inspection, inventory, logging, storage, documentation, transmittal, and internal distribution of classified information received
• Evaluate Contractor classified data submittals for compliance with the appropriate System Security Classification Guide (SSCG)
• Provide security inspection and protection to areas where classified information is being stored, and develop and establish security procedures and policies IAW DOD, USAF, AFMC, and local directives
• Develop training and provide security awareness and other security education programs 
• Review and verify personnel qualifications for access to special access programs  
• Develop, implement, and maintain a communications security program
• Assess program disclosure issues and provide FMS case management support
• Assist and advise FMS program office management and leadership in interfacing with FMS customers and all USG organizations, including but not limited to SAF/IA, Air Force Security Assistance Center (AFSAC), Air Force Security Assistance Training (AFSAT) squadron, Defense Finance and Accounting Services (DFAS)
• Support execution of all aspects of acquisition program security throughout a program’s lifecycle
• Assist with development of sound security practices and policies regarding acquisition, physical, personnel and documentation security
• Update security classification guides 
• Prepare acquisition security related sections of acquisition program documentation
• Review Contractor deliverables to ensure compliance with CDRLs 
• Plan and implement security-related surveys, assessments, and studies
• Evaluate program security information and hardware throughout the program life cycle, to include studies, analyses, plans, procedures, production, test plans/results, transportation, technology, and storage of end items
• Provide security support to source selections
• Understanding of cybersecurity in DoD cloud infrastructure
• Understanding of Agile methods, including CI/CD, DevSecOps, and DevOps
• Possess the ability to effectively communicate in both written and verbal forms on highly technical topics 

Education and Experience:
Must have one of the following combinations of education and experience:

• Seven (7) years of directly related experience, five (5) of which must be in the DoD, or
• Bachelor's or Master's degree in a related field, and three (3) years of which must be in DoD.
• DoD 8570.01 M IAT Level II certification 

Position Type/Expected Hours of Work:
This is a full-time position requiring 40 hours per week and offers a flexible work schedule Monday through Friday during core business hours.  

Other Position Requirements:

• Proof of U.S. Citizenship or US Permanent Residency is a requirement for this position.
• Must be able to complete a U.S. government background investigation.
• Must be able to obtain a Secret clearance. 
• Must be able to travel, including air travel.

HX5 offers a competitive salary and benefits package to include:

• Medical/Dental/Vision Insurance
• 401(k) plan with Company Match
• Paid Holidays
• Accrued Paid Time Off
• Life Insurance
• Tuition Reimbursement
• Identity Protection
• Medical and Dependent Care Flexible Spending Accounts
• Commuter/Transit Spending Accounts
• Group Legal Coverage Options
• Pet Insurance

HX5, LLC is an Equal Opportunity Employer that recruits and hires qualified candidates without regard to race, religion, sex, sexual orientation, gender identity, age, national origin, ancestry, citizenship, disability, or veteran status.

HX5, LLC is a Drug Free Workplace Employer.

ACCESSIBILITY NOTICE:
If you need a reasonable accommodation for any part of the employment process due to a physical or mental disability, please call (850) 362-6551.

CJ

Salary : $109,000 - $138,000