Senior Cyber Security Engineer
$180,000–$180,000 year
On-siteVienna, Virginia, United States
Job Summary
Assess and authorize systems by applying Risk Management Framework (RMF) processes, including control selection, implementation, assessment, and continuous monitoring. Develop and maintain security documentation such as System Security Plans, Plan of Action and Milestones, and Authorization to Operate artifacts in XACTA or eMASS. Conduct vulnerability assessments and compliance scans, track remediation of findings, and implement security controls aligned with NIST 800-53 and CNSSI 1253. Support system hardening, patching, and configuration management for Linux, Windows, and network devices in compliance with STIGs. Monitor systems for security events, support incident response activities, and assess security impacts of system changes for configuration control boards. Collaborate with system engineers, administrators, and DevSecOps teams to integrate security throughout the system lifecycle while providing risk input to program leadership and Authorizing Officials.
Required Qualifications
- Bachelor's degree with 5+ years of experience (or equivalent experience)
- Experience with RMF, A&A, POA&M, and ATO documentation (XACTA/eMASS)
- Experience securing Linux and Windows systems, STIGs, patching, and system hardening
- DoD 8570 IAT Level II or higher certification (e.g., Security+, CySA+, CISSP)
- Active or Current (within two years of active) Top Secret Security Clearance with SCI eligibility
- Hands-on vulnerability scanning and compliance tracking (ACAS, IAVM)
- Knowledge of NIST 800-series publications and incident response processes
- Strong analytical, communication, and collaboration skills
- Ability to work independently and yet be effective within a team setting
- Must be capable of managing multiple efforts with time-related constraints in a fast-paced contracting environment
- Demonstrated ability to effectively communicate and collaborate with diverse internal and external stakeholder groups and individuals
- Excellent skills in Microsoft Word, Excel, and other Office applications
- Proficient with Microsoft Office Applications, and experience working in a home office setting, as well as the ability to train end users on frequently asked technical issues
- Ability to provide technical assistance and support over the phone; good phone skills, professional demeanor, and previous customer service experience strongly desired
- Good problem-solving skills; ability to visualize a problem/situation and think abstractly to solve it
Desired Qualifications
- Scripting or development experience (Python, Java, React)
- DevSecOps tools and pipeline experience
- Experience with Linux (Red Hat/CentOS), databases, web apps, or big data platforms
- Familiarity with Agile environments and tools (Jira, Confluence)
- Experience with NIST SP 800-171 and System Security Engineering (SSE)
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.