Cyber Security Engineer

Rampant Technologies; Fairfax (VA); On-site; USD 90,000 - 120,000; Full time

Job summary

A technology firm in Virginia is seeking a Cybersecurity Engineer to perform vulnerability assessments and ensure compliance with security requirements. Candidates must have a minimum of 3 years of relevant experience and an active TS/SCI clearance. This position involves technical guidance on information security and management of operations systems, contributing to the overall security architecture and continuous monitoring practices.

Qualifications

• Active TS/SCI w/ Poly clearance required.
• Experience with IT security principles and methods.
• Knowledge of DoD/IC security control requirements.

Responsibilities

• Perform vulnerability assessments using standardized tools.
• Track and fulfill liens associated with A&A activities.
• Validate best practices in penetration testing.

Skills

Cybersecurity expertise

Vulnerability assessments

NIST SP 800-53 compliance

Network access management

Windows/Linux management

Education

Minimum of 3 years relevant experience in Cybersecurity

IAT Level II Certifications (Security+ or equivalent)

Tools

Nessus

XACTA

SNOW tools

Job description

Overview

A Rampant Technologies Cybersecurity Engineer (CSE) is a key resource on the Rampant team reporting to the Principal Engineer overseeing the CSE team to deliver innovative Cyber Security solutions aligned with the company’s goals. The CSE is a subject-matter expert on problem identification, diagnosis, and resolution, and develops best practices for processes and standards to improve the system.

Responsibilities

• Perform vulnerability assessments using standardized tools (Nessus, DISA STIGs) and apply configuration updates to comply with security requirements.
• Track and fulfill liens associated with A&A activities as documented in the Plan of Actions and Milestones.
• Hardening of operations systems, COTS and open-source products.
• Validate best practices in penetration testing, configuration analysis, and security assessments.
• Prepare comprehensive security assessment testing documentation to validate applied security controls in support of Assessment and Authorization (A&A) testing; generate and maintain security accreditation artifacts associated with the RMF process, including Security Requirements Traceability Matrix, and perform timely updates in the accreditation database.
• Provide technical guidance focused on information security architecture.

Key Skills, Education & Experience

• Minimum eight (3) years’ relevant experience as a Cybersecurity Engineer in programs and contracts of similar scope, type, and complexity; ideally three (3+) years of direct experience in the same role.
• Techno-functional knowledge of/experience with:
• Execution of the A&A process in accordance with government requirements (e.g., ICD-503).
• Information systems security and continuous monitoring practices and how to assess their effectiveness per NIST SP 800-53 and NIST SP 800-53A.
• DCID 6/3, ICD 503, CNSSI 1253, NIST SP 800-53, NIST SP 800-53A, NIST SP 800-37, and related assessment criteria.
• Integrity, availability, authentication, and non-repudiation concepts; IT security principles and methods (firewalls, DMZs, encryption).
• Network access and identity management (e.g., PKI); security system design tools and techniques.
• Knowledge of DoD/IC system security control requirements and relevant laws, policies, and governance related to critical infrastructure.
• Management best practices for Windows and Linux OS, known vulnerabilities, and continuous monitoring per NIST SP 800-137 with automation where applicable.
• Virtualization technologies (e.g., VMware, Docker); OSI model understanding and network protocol knowledge.
• Ability to apply DoD/IC security controls, XACTA and SNOW tools, and security testing tools (including ACAS).
• Proficiency with Microsoft Office Suite (e.g., Project, Visio).

Certifications and Clearance

• Active TS/SCI w/ Poly clearance required; certification compliant with DoD 8570 IAM or IAT level 3, or obtain certification within 6 months of hire and maintain it during employment.
• IAT Level II Certifications (Security+ or equivalent).