Cyber Security Engineer - Remote

Overview

VetsEZ is seeking a Cyber Security Engineer (System Steward) to support a Department of Veterans Affairs (VA) project. This role involves guiding cybersecurity compliance efforts through the NIST Risk Management Framework (RMF), supporting the Authority to Operate (ATO) process, and ensuring systems maintain a strong security posture. The ideal candidate will bring expertise in cloud and enterprise security, risk assessments, and compliance documentation.

In Short

• Lead ATO activities, including creation of RMF artifacts and POAMs.
• Support security documentation such as Incident Response, Contingency Plans, and Disaster Recovery.
• Conduct risk and impact assessments, implementing security controls and mitigations.
• Analyze authorization documents, identify gaps, and coordinate remediation plans with stakeholders.
• Utilize tools like eMASS, Nessus, Nmap, Wireshark, and SCAP for compliance assessments.
• Apply NIST 800-53 and FedRAMP security controls across IaaS, PaaS, and SaaS environments.
• Provide security guidance for system design, development, and configuration.
• Deliver clear reports and security briefings to technical and non-technical audiences.

Requirements

• Bachelor’s degree in Cybersecurity, Information Systems, or related field.
• 5+ years of experience in Information Security, including 3+ years in Cyber Security or Cloud Security.
• Hands-on experience with RMF, ATO processes, and federal cybersecurity standards.
• Strong understanding of IT systems, cloud environments, and compliance frameworks (e.g., FedRAMP, NIST).
• Proficiency in evaluating system vulnerabilities and implementing security controls.

Benefits

• Medical/Dental/Vision
• 401k with Employer Match
• PTO + Federal Holidays
• Corporate Laptop
• Training opportunities