Cybersecurity engineer

Torch Technologies

Thank you for your interest in employment with Torch Technologies. We are a 100% employee-owned, Certified Great Place To Work and named Best Places to Work in Huntsville/Madison County, headquartered in Huntsville, AL with over 1200 employee-owners. Our team provides superior research, development, and engineering services to the Federal Government and Department of Defense. As one of the nation’s top 100 defense companies, the services we provide directly support the men and women who serve our country. Our corporate mission sums up the pride our employee-owners take in the work we do: “Lighting the Pathway of Freedom”. And, as a Certified Evergreen ESOP, we have made the commitment to grow and sustain our company for the next 100 years! Come grow with us!

Torch Technologies has an exciting opportunity for a Cybersecurity Engineer Journeyman providing support to the Command, Control, Communications, and Battle Management Division (C3BM) at Hanscom AFB, MA.

As a Cybersecurity Engineer your duties will include the following, but are not limited to:

• Identify and evaluate opportunities to apply innovative and emerging technologies, automate processes, continually improve the conduct and efficiency of audit activities and enterprise audit compliance of systems and infrastructure, and identify metrics for monitoring improvements.
• Develop/update and maintain system-specific audit review dashboards and reporting mechanisms to show compliance across enterprise.
• Review data and prepare ACAS reports for SPO Leadership to include pre/post VVA reports, GCCS-J STRATCOM reports, etc. Generate Third Party Applications/Systems vulnerability reports and provide to team for resolution with COTs/GOTs owners.
• Assist with creation of ACAS TTPs, SOPs, and capture of lessons learned to improve performance, efficiency, and effectiveness of Cybersecurity personnel using the ACAS for the AOC WS Enterprise.
• Daily center reporting – verifying security compliance with IAVA’s and DISA STIGS. Daily central server maintenance - check logs, syncs, job queues, CSU dashboards, validate scans are credentialed and ACAS scanners and Security Center are operational and reporting properly for AOC sites
• Gathering, and reporting of AOC WS Software and Hardware information for EDS/CM team on a monthly or when requested.
• Ensure AOC WS 10.1 baseline aligns with OPORDS and Cyber Tasking Orders. Review ARE/FT ACAS documentation and redline as necessary. Support the research and analysis of DoD and AF policies and tasking orders to mitigate implementation problems that may impact the AOC WS 10.1 ACAS implementation.
• Provide subject matter expertise (SME) on ACAS (Assured Compliance Assessment Solution) systems and related processes.
• Promoting awareness of security issues among management and ensuring sound security principles are reflected in organizations’ visions and goals.
• Assist in the design, implementation, configuration, and maintenance of ACAS tools and applications for the KR enterprise.
• Standardize ACAS reporting and provide oversight to internal and external leadership, 20+ sites (CONUS and OCONUS), and ACAS cyber team members.
• Review and approve reports and metrics related to ACAS scans and vulnerability management efforts before released to KR leadership.
• Analyze security vulnerabilities identified by ACAS scans and provide oversite and recommendations for remediation.
• Collaborate with ACAS teams to ensure proper integration and utilization of ACAS tools within KR.
• Stay updated on industry best practices and emerging trends related to ACAS and cybersecurity.
• Support training efforts for staff members on the use of ACAS tools and interpretation of scan results for KR.
• Develop scripting to work with the ACAS applications to reduce manual assessment of compliance reporting.
• Update and maintain the KR ACAS (Nessus scanners and Security Centers) system at Hanscom AFB, including planning, delivery, installation, security hardening, configuration, integration, and testing.
  • Administering Red Hat Enterprise Linux, including:
  • Building, patching, and configuring RHEL systems (RHEL 7/8) to meet STIG requirements.
  • Configuring DNS, NTP, and network settings to support ACAS installation.
  • Performing backups and restores of system OS and installed software.
• Provide SME level support to define, analyze, implement, secure, test, and deploy new requirements and enhancements for network monitoring, vulnerability identification, remediation, and security compliance IAW current OPORDS.
• Assist with automation and implementation of periodic vulnerability reporting from ACAS to internal and external KR organizations.
• Review of discovery scan results to identify systems not being vulnerability scanned and automated reporting.
• Review of vulnerability scan results to identify, troubleshoot, and resolve credential and other common scan issues, and automated reporting.
• Review and compilation of scan results to support asset inventory requirements and automation.
• Assessment of scan results to identify areas where vulnerability remediation has the greatest impact on risk and automated reporting.
• Configuration of ACAS components to align with DISA Best Practice Guidance.
• Troubleshooting and resolution of communication issues between ACAS software components, failed plugin updates, and other common software issues with the Hansom ACAS Servers.

Job Requirements

• U.S. Citizenship
• BS Degree in a professional engineering discipline and 7 years of experience in the respective technical/professional discipline is required, 3 of which must be in the DoD.
• Must have and be able to maintain a Top-Secret clearance.
• Must have a Security + Certification.

Schedule : M-F; 8AM to 5PM

Work Location: Hanscom AFB, MA

Travel : 10% travel is required.

Relocation Assistance Available: No

Position Contingent Upon Award of Contract: No

#LI-EW1

Benefits:

Torch Technologies is proud to offer a stable and professional work environment, a competitive salary, and an excellent, comprehensive benefit package including: ESOP participation, 401(k) match and safe-harbor contribution, medical, dental, vision, life insurance, short-term disability, long-term disability, flexible spending accounts, Health Saving Accounts and Health Reimbursement Accounts, EAP, education assistance, paid time off, and holidays.

Applying to Torch Technologies:

Only those candidates invited for an interview will be contacted. Employment at Torch Technologies is contingent upon the successful completion of a comprehensive background check.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, citizenship, ancestry, marital status, protected veteran status, disability status or any other status protected by federal, state, or local law. Torch Technologies, Inc. participates in E-Verify.

If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access Careers Link as a result of your disability. You can request reasonable accommodations by sending an email to [email protected]. Thank you for your interest in Torch Technologies.