Key Skills, Education & Experience
Minimum of eight (3) years’ relevant experience as a Cybersecurity Engineer in programs and contracts of
similar scope, type, and complexity is required; ideally three (3+) years of direct experience in the same
level/grade for like role.
Techno functional knowledge of/experience in
Execution of the Assessment & Authorization (A&A process) in accordance with government
requirements (e.g. ICD-503)
Information systems security and continuous monitoring practices and how to assess their
effectiveness per NIST SP 800-53 and NIST SP 800-53A.
DCID 6/3, ICD 503, CNSSI 1253, NIST SP 800-53, NIST SP 800-53A, NIST SP 800-37, and security controls
assessment criteria/procedures
Integrity, availability, authentication, and non-repudiation concepts
IT security principles and methods (e.g., firewalls, demilitarized zones, encryption)
Network access, identity, and access management (e.g., public key infrastructure [PKI])
Security system design tools, methods, and techniques
Relevant laws, policies, procedures, or governance as they relate to work that may impact critical
infrastructure.
TCP/IP networking technologies, Linux account administration, Linux folder permissions, Patch
Management best practices on Operating Systems and applications, known vulnerabilities associated
with Windows and Linux platforms.
Continuous monitoring processes as outlined in NIST SP 800-137 appropriate for systems, leveraging
existing tools, efforts, and incorporating new automation techniques.
Virtualization technologies (e.g. VMWare, Docker)
OSI model and how specific devices and protocols interoperate, including knowledge of protocols, and
services for common network traffic
DoD/IC system security control requirements