Remote Merchant Risk Analyst Jobs in Tacoma, WA (NOW HIRING)

Overview

Senior Cybersecurity Engineer

LOCATION: Seattle, WA

Salary Range:$160-$180,000 annually*

*depending on experience, certifications, and qualifications

JOB STATUS: Full-time

CLEARANCE: Secret

TRAVEL: 10%

Astrion has an exciting opportunity for a Senior Cyber Security Engineer supporting the Air Force Life Cycle Management Center (AFLCMC/HB). This position provides cybersecurity support to ensure systems and applications comply with Department of Defense (DoD) and Air Force cybersecurity policies throughout the system lifecycle.

The selected candidate will support Risk Management Framework (RMF) activities, cybersecurity assessments, system authorization efforts, vulnerability management, and security compliance while partnering with Government and industry stakeholders. This role also supports cybersecurity testing, secure system implementation, and the protection of mission systems in accordance with DoD cybersecurity requirements.

This is primarily a remote position supporting the Seattle area with approximately 10% travel to Boeing San Antonio, Tinker AFB, Hanscom AFB, and occasional OCONUS travel, including Japan, in support of program activities.

*Position Contingent Upon Contract Award*

Citizenship: Must be a US citizen

Minimum Required Qualifications

Clearance: Must possess and be able to maintain an Active Top Secret Security Clearance.

PREFERRED QUALIFICATIONS / SKILLS:

Education: Bachelor’s Degree in a related field and 12 years of experience in the respective technical/professional discipline being performed, five of which must be in the DoD, OR,

• • 15 years of directly related experience, 8 of which must be in the DoD

Technical Skills

• Risk Management Framework (RMF)
• Assessment & Authorization (A&A)
• Authority to Operate (ATO)
• Cybersecurity Compliance
• Cybersecurity Testing
• Vulnerability Assessment & Risk Analysis
• DISA STIG Implementation
• Public Key Infrastructure (PKI)
• Cross Domain Solutions (CDS)
• Lab Authority to Connect (ATC)
• DevSecOps / DevOps / CI/CD
• Microsoft Office Suite
• SharePoint

Interpersonal Skills

• Excellent written and verbal communication skills
• Ability to work independently in a remote environment
• Strong collaboration and teamwork skills
• Analytical and critical thinking abilities
• Strong organizational and documentation skills
• Detail-oriented with excellent problem-solving capabilities
• Ability to manage multiple priorities simultaneously
• Adaptable and self-motivated
• Comfortable working with Government, Boeing, and cross-functional contractor teams

RESPONSIBILITIES:

• Provide cybersecurity support to ensure system and application compliance with DoD and Air Force cybersecurity policies and directives.
• Support Risk Management Framework (RMF) activities including Assessment & Authorization (A&A), Authority to Operate (ATO), and continuous monitoring.
• Assist with the development and maintenance of System Security Plans (SSPs), Program Protection Plans (PPPs), Security Risk Analyses, OPSEC Plans, and other cybersecurity documentation.
• Support cybersecurity testing and validation activities to ensure systems meet security requirements.
• Review and assess RMF security controls and recommend corrective actions where needed.
• Support Lab Authority to Connect (ATC) and Cross Domain Solution (CDS) activities.
• Process and manage user accounts, access requests, Public Key Infrastructure (PKI) requirements, ports, protocols, and access control requests.
• Monitor, implement, and track cybersecurity patches, security updates, and system configurations.
• Conduct cybersecurity risk and vulnerability assessments and recommend mitigation strategies.
• Participate in system design reviews to ensure cybersecurity requirements are incorporated throughout the development lifecycle.
• Support secure software development initiatives and DISA Security Technical Implementation Guide (STIG) compliance.
• Collaborate with Government, Boeing, and contractor personnel to support cybersecurity requirements and program milestones.
• Maintain cybersecurity records, reports, databases, and security documentation.
• Support cybersecurity inspections, audits, contingency planning, and incident response activities.
• Assist with acquisition program security activities throughout the program lifecycle.
• Develop and deliver cybersecurity awareness and security education as required.
• Support Agile development environments utilizing DevSecOps, DevOps, and CI/CD methodologies.
• Travel as required to support cybersecurity assessments, customer meetings, and program activities

*Position Contingent Upon Contract Award*