Cyber Security Engineer

Triglocon; Arlington (VA); On-site; Full time

Benefits offered by this job

Medical, Dental & Vision Coverage

Paid Time Off

Paid Holidays

Disability & Life Insurance

401(k) Retirement Plan

Professional Training

Job summary

A security solutions provider in Arlington, Virginia, is seeking a cybersecurity professional with a Bachelor's degree and over 5 years of experience. The role includes supporting security assessments and authorizations, conducting vulnerability assessments, and collaborating with engineering teams. Candidates must have IAT Level II certification and a current Top Secret clearance. Benefits include health coverage, PTO, 401(k) retirement plan, and professional training opportunities.

Qualifications

• 5+ years of experience in cybersecurity roles.
• DoD 8570 IAT Level II certification or higher.
• Experience with security documentation and vulnerability scanning.
• Knowledge of system hardening and compliance processes.

Responsibilities

• Support system Assessment & Authorization (A&A).
• Conduct vulnerability assessments and compliance scans.
• Implement security controls in compliance with NIST 800-53.
• Collaborate with engineering and DevSecOps teams.

Skills

Analytical skills

Communication skills

Collaboration skills

Vulnerability scanning

RMF knowledge

Experience with NIST standards

Education

Bachelor's degree

Tools

XACTA

eMASS

ACAS

Python

Java

React

Jira

Confluence

Job description

Duties May Include:

• Apply RMF processes to support system Assessment & Authorization (A&A), including control selection, implementation, assessment, and continuous monitoring
• Develop, review, and maintain security documentation such as SSPs, POA&M, SARs, and ATO artifacts in tools such as XACTA or eMASS
• Conduct vulnerability assessments and compliance scans (e.g., ACAS) and track remediation of findings and IAVM requirements
• Implement and validate security controls aligned with NIST 800-53, CNSSI 1253, and related DoD guidance
• Support system hardening, patching, and configuration management in compliance with STIGs for Linux, Windows, and network devices
• Monitor systems for security events and support incident response and risk mitigation activities
• Assess security impacts of system changes and support configuration control boards (CCBs)
• Collaborate with system engineers, administrators, and DevSecOps teams to integrate security throughout the system lifecycle
• Provide cybersecurity risk input to program leadership, Authorizing Officials (AOs), and stakeholders

Required Qualifications:

• Bachelor's degree with 5+ years of experience (or equivalent experience)
• DoD 8570 IAT Level II or higher certification (e.g., Security+, CySA+, CISSP)
• Experience with RMF, A&A, POA&M, and ATO documentation (XACTA/eMASS)
• Hands‑on vulnerability scanning and compliance tracking (ACAS, IAVM)
• Experience securing Linux and Windows systems, STIGs, patching, and system hardening
• Knowledge of NIST 800-series publications and incident response processes
• Strong analytical, communication, and collaboration skills
• US Citizenship required
• Active or current (within two years of active) Top Secret clearance with SCI eligibility

Desired Qualifications:

• Scripting or development experience (Python, Java, React)
• DevSecOps tools and pipeline experience
• Experience with Linux (Red Hat/CentOS), databases, web apps, or big data platforms
• Familiarity with Agile environments and tools (Jira, Confluence)
• Experience with NIST SP 800-171 and System Security Engineering (SSE)

Benefits:

• Medical, Dental & Vision Coverage – Coverage for eligible employees and family through CareFirst and VSP.
• Paid Time Off – PTO granted in accordance with contract requirements.
• Paid Holidays – 11 federal holidays observed annually.
• Disability & Life Insurance – Short-term/long-term disability, life insurance, and AD&D coverage included.
• 401(k) Retirement Plan – Competitive plan managed through Ameritas.
• Professional Training – Formal training provided as required, with additional learning opportunities based on role.