Sr. Cybersecurity Engineer I (6861)

As a Sr. Cybersecurity Engineer I, you will support a government program by applying NIST SP 800-53 controls, monitoring security posture, analyzing vulnerabilities, and coordinating remediation across AWS, applications, APIs, and infrastructure. The role also includes junior Business Analyst and Project Manager responsibilities, such as defining security requirements, facilitating stakeholder discussions, tracking action items, and reporting progress.

We know that you can’t have great technology services without amazing people. At MetroStar, we are obsessed with our people and have led a two-decade legacy of building the best and brightest teams. Because we know our future relies on our deep understanding and relentless focus on our people, we live by our mission: A passion for our people. Value for our customers.

If you think you can see yourself delivering our mission and pursuing our goals with us, then check out the job description below!

What you’ll do:

• Communicate regularly with DHS customers and internal engineering teams to lead required RMF process/steps to assess and authorize a system obtaining and maintaining a full ATO (Authority to operate).
• Perform monthly continuous monitoring reporting to include analysis of scans, logs, accounts, etc.
• Support writing and reviewing of Risk Management Framework (RMF) documentation packages to support risk assessments.
• Design and execute the security testing plan of all requirements and analysis required to complete a RMF package document for submittal and approval.
• Use vulnerability scanning tools and frameworks to evaluate the security posture of a system.
• Assist the customer in preparing training and table top exercises for contingency planning, incident response and disaster recovery.
• Complete ISSO USCIS provided training as required.

What you’ll need to succeed:

• Minimum of five years of IT experience as a Security Lead or Information Security Analyst, including evaluation, implementation, or management of security practices for new and existing technologies.
• Bachelor’s degree in Computer Science or a comparable field, or equivalent experience.
• Strong understanding of NIST SP 800-53 controls and their application within the RMF.
• Strong understanding of API-based security mechanisms and the OWASP framework for web application vulnerabilities. Hands-on implementation is not required.
• Experience with AWS architecture and a technical understanding of cloud technologies used in customer environments, including microservices, containers, zero trust concepts, data streaming, or data pipelines.
• Experience conducting continuous monitoring, preparing monthly status reports, and analyzing and reporting cybersecurity vulnerability scan results.
• Experience assessing the risk of deficiencies identified during RMF control testing and tracking corrective actions.
• Experience with requirements analysis, security architecture and design, and documentation of cybersecurity or information security solutions.
• Experience using cybersecurity tools or scanners to evaluate system security posture, including scanning or reporting for web applications, databases, containers, or other system components.
• Working knowledge of Agile and DevSecOps practices and cybersecurity, network, systems, and software engineering principles.
• Ability to gather requirements, coordinate stakeholders, facilitate meetings, and track security work through completion.
• Ability to obtain and maintain DHS suitability
• An ISSO-relevant professional certification.

SALARY RANGE: $100,000.00 - $125,000.00

The salary range for this position is determined based on qualifications, skills, and relevant experience. The final salary offered will be determined based on several factors including:

• The candidate's professional background and relevant work experience
• The specific responsibilities of the role and organizational needs
• Internal equity and alignment with current team compensation
• This role is also eligible for additional compensation, subject to the terms and policies of MetroStar, which may include:
• Performance-based bonuses
• Company-paid training and/or certifications
• Referral bonuses