Offer summary

Qualifications:

Bachelor’s degree in Cybersecurity, Information Systems, or related field., At least 5 years of experience in Information Security, with 3+ years in Cyber Security or Cloud Security., Hands-on experience with RMF, ATO processes, and federal cybersecurity standards., Required ISC2 CISSP certification and additional relevant certifications..

Key responsibilities:

Lead ATO activities, including creating RMF artifacts and POAMs.

Support security documentation such as Incident Response and Disaster Recovery plans.

Conduct risk assessments and implement security controls.

Provide security guidance and deliver reports to technical and non-technical audiences.

Job description

VetsEZ is seeking a Cyber Security Engineer (System Steward) to support a Department of Veterans Affairs (VA) project. This role involves guiding cybersecurity compliance efforts through the NIST Risk Management Framework (RMF), supporting the Authority to Operate (ATO) process, and ensuring systems maintain a strong security posture. The ideal candidate will bring expertise in cloud and enterprise security, risk assessments, and compliance documentation.

The candidate must reside within the continental US.

Responsibilities:

Lead ATO activities, including creation of RMF artifacts and POAMs.
Support security documentation such as Incident Response, Contingency Plans, and Disaster Recovery.
Conduct risk and impact assessments, implementing security controls and mitigations.
Analyze authorization documents, identify gaps, and coordinate remediation plans with stakeholders.
Utilize tools like eMASS, Nessus, Nmap, Wireshark, and SCAP for compliance assessments.
Apply NIST 800-53 and FedRAMP security controls across IaaS, PaaS, and SaaS environments.
Provide security guidance for system design, development, and configuration.
Deliver clear reports and security briefings to technical and non-technical audiences.

Requirements:

Bachelor’s degree in Cybersecurity, Information Systems, or related field.
5+ years of experience in Information Security, including 3+ years in Cyber Security or Cloud Security.
Hands-on experience with RMF, ATO processes, and federal cybersecurity standards.
Strong understanding of IT systems, cloud environments, and compliance frameworks (e.g., FedRAMP, NIST).
Proficiency in evaluating system vulnerabilities and implementing security controls.

Additional Qualifications:

Required certification: ISC2 CISSP.
Additionally, must have one or more of the following certifications: IAT II, IAM II, IASAE II, Security+, CISA, CEH, CAP, SSCP, CCSP, or similar.
Experience supporting VA, DoD, GSA, or other federal agencies.
Ability to obtain government clearance.

Benefits:

Medical/Dental/Vision
401k with Employer Match
PTO + Federal Holidays
Corporate Laptop
Training opportunities

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, or protected veteran status.

Sorry, we are unable to offer sponsorship at this time.

Required profile