Cyber Security Engineer

Incatech Corp; Springfield (VA); On-site; USD 110,000 - 150,000; Full time

Job summary

INCATech LLC is seeking a Cyber Security Engineer to support critical DoD and Intel missions. This role emphasizes cybersecurity engineering, risk management, and compliance across cloud and on-prem systems, including A&A, RMF, and continuous monitoring in classified environments.

The position requires active Top Secret clearance, experience with RMF/ATO documentation, vulnerability scanning (ACAS), and strong collaboration with DevSecOps teams. On-site work at multiple locations is expected.

Qualifications

• Bachelor's degree with 5+ years of experience.
• DoD 8570 IAT Level II or higher certification.
• Experience with RMF, A&A, POA&M, and ATO documentation (XACTA/eMASS).
• Hands-on vulnerability scanning and compliance tracking (ACAS, IAVM).
• Experience securing Linux and Windows systems, STIGs, patching, and system hardening.
• Knowledge of NIST 800-series publications and incident response processes.
• Strong analytical, communication, and collaboration skills.

Responsibilities

• Applying RMF processes to support A&A, including control selection, implementation, assessment, and continuous monitoring.
• Developing, reviewing, and maintaining security documentation such as SSPs, POA&Ms, SARs, and ATO artifacts (XACTA/eMASS).
• Conducting vulnerability assessments and compliance scans (ACAS) and tracking remediation and IAVM requirements.
• Implementing and validating security controls aligned with NIST 800-53, CNSSI 1253, and DoD guidance.
• Supporting system hardening, patching, and configuration management per STIGs for Linux, Windows, and network devices.
• Monitoring systems for security events and supporting incident response and risk mitigation activities.
• Assessing security impacts of system changes and supporting CCBs.
• Collaborating with system engineers, admins, and DevSecOps to integrate security throughout the lifecycle.
• Providing cybersecurity risk input to program leadership, AOs, and stakeholders.

Skills

Analytical skills

Communication

Collaboration

Security mindset

Education

Bachelor's degree

DoD 8570 IAT Level II or higher certification

Tools

XACTA/eMASS

ACAS

Job description

LOCATION: Springfield VA, Vienna, VA St. Louis, MO, potentially other locations. ALL work will be onsite.

Clearance: MUST possess active Top Secret clearance

INCATech is URGENTLY searching for a Cyber Security Engineer. A Cyber Security Engineer supports critical DoD and Intel missions and programs. This role focuses on cybersecurity engineering, risk management, and compliance across cloud and on-prem systems, supporting system authorization, vulnerability management, and secure operations in classified environments.

Responsibilities

• Applying RMF processes to support system Assessment & Authorization (A&A), including control selection, implementation, assessment, and continuous monitoring
• Developing, reviewing, and maintaining security documentation such as SSPs, POA&Ms, SARs, and ATO artifacts in tools such as XACTA or eMASS
• Conducting vulnerability assessments and compliance scans (e.g., ACAS) and tracking remediation of findings and IAVM requirements
• Implementing and validating security controls aligned with NIST 800-53, CNSSI 1253, and related DoD guidance
• Supporting system hardening, patching, and configuration management in compliance with STIGs for Linux, Windows, and network devices
• Monitoring systems for security events and supporting incident response and risk mitigation activities
• Assessing security impacts of system changes and supporting configuration control boards (CCBs)
• Collaborating with system engineers, administrators, and DevSecOps teams to integrate security throughout the system lifecycle
• Providing cybersecurity risk input to program leadership, Authorizing Officials (AOs), and stakeholders

Requirements

Qualifications

• Bachelor's degree with 5+ years of experience (or equivalent experience)
• DoD 8570 IAT Level II or higher certification (e.g., Security+, CySA+, CISSP)
• Experience with RMF, A&A, POA&M, and ATO documentation (XACTA/eMASS)
• Hands‑on vulnerability scanning and compliance tracking (ACAS, IAVM)
• Experience securing Linux and Windows systems, STIGs, patching, and system hardening
• Knowledge of NIST 800-series publications and incident response processes
• Strong analytical, communication, and collaboration skills

Preferred

• Scripting or development experience (Python, Java, React)
• DevSecOps tools and pipeline experience
• Experience with Linux (Red Hat/CentOS), databases, web apps, or big data platforms
• Familiarity with Agile environments and tools (Jira, Confluence)
• Experience with NIST SP 800-171 and System Security Engineering (SSE)

About INCATech LLC

INCATech is an award-winning small business that has over 14 years of experience supporting the US Government. We provide both Professional Services as well as Transformational Software Solutions for our customers. Our deep technical expertise in Geospatial Information Systems, Enterprise Data Management, User‑Centered Design, Cloud & Platform Services, and a wide range of Acquisition Support Services will provide your career the boost you have been looking for. Our culture is based on empowering our staff and customers with knowledge and tools to achieve mission success and career advancement.

Benefits

INCATech offers a competitive comprehensive benefits package. Our most valuable asset at INCATech is our people. Our benefits package is designed to help and safeguard our employees and their families. We provide a variety of life and family benefits to meet a variety of demands. Benefits include: Health, Dental, 401K, Vision, Paid Time Off, Life Insurance etc.

INCATech is an Equal Opportunity Employer.

Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law.