Cyber Defense Engineer - DoD RMF & Zero Trust Lead

Data Systems Analysts, Inc.; Charlottesville (VA); Vor Ort; USD 140.000 - 170.000; Vollzeit

Zusammenfassung

Data Systems Analysts, Inc. in Charlottesville, VA, is seeking a TS/SCI-cleared Cybersecurity Engineer to support RMF documentation, accreditation, and security readiness in a secure DoD environment.

The role collaborates with technical and compliance teams to strengthen vulnerability management, apply STIGs, and sustain authorization across enterprise systems. Onsite at NGIC, relocation encouraged for qualified candidates.

Qualifikationen

• BS degree or equivalent experience in a related field.
• Hands-on cybersecurity engineering experience in DoD/IC.
• Understanding of RMF, security controls, and ATO processes.

Aufgaben

• Serve as a hands-on cybersecurity authority across DoD systems.
• Advise architects, system owners and engineers on security requirements and secure implementation.
• Assess architectures and configurations to identify vulnerabilities and mitigation strategies.
• Perform vulnerability assessment and remediation using ACAS, Nessus, SIEM, and other tools.
• Apply, validate, and troubleshoot DISA STIGs, SCAP benchmarks, and system hardening requirements.
• Support incident response, Continuous Monitoring, vulnerability management, and ongoing assessment of posture.
• Implement and validate cybersecurity controls across OS, apps, networks, and endpoints.
• Identify opportunities to automate security assessments and control testing.

Kenntnisse

Vulnerability management

RMF processes

Cybersecurity engineering

Ausbildung

BS degree in Engineering, Computer Science, or related field

Tools

ACAS

Tenable/Nessus

SIEM

eMASS

DISA STIGs

Jobbeschreibung

Data Systems Analysts, Inc. in Charlottesville, VA, is seeking a TS/SCI-cleared Cybersecurity Engineer to support RMF documentation, accreditation, and security readiness in a secure DoD environment.

The role collaborates with technical and compliance teams to strengthen vulnerability management, apply STIGs, and sustain authorization across enterprise systems. Onsite at NGIC, relocation encouraged for qualified candidates.