Cyber Security Engineer III

System One; Springfield (VA); On-site; USD 85,000 - 110,000; Part time

Job summary

System One is looking for a Cyber Security Engineer in Springfield, VA. This role involves supporting critical cyber operations, focusing on incident response, investigation, and coordination across various teams. The ideal candidate will have an active TS/SCI clearance and experience in cybersecurity.

Key responsibilities include coordinating response activities, analyzing data, and developing indicators of compromise. Preferred qualifications include a Master’s degree and advanced certifications in cybersecurity. This is a 6-month contract-to-hire position.

Qualifications

• Active TS/SCI clearance is mandatory.
• Ability to obtain a polygraph is required.
• Experience performing incident triage, containment, and reporting is essential.

Responsibilities

• Coordinate and support cyber incident response activities.
• Perform analysis and documentation of response actions.
• Develop indicators of compromise and share findings with stakeholders.

Skills

Cyber incident response

Threat hunting

Incident investigation

Indicators of compromise

Analysis of host/system data

Education

Bachelor’s degree or 6+ years of cybersecurity experience

DoD 8570 / 8140 IAT Level II certification

Tools

Malware analysis tools

Digital forensics tools

Job description

Job Title: Cyber Security Engineer
Location: Springfield, VA
Work Model: On site
Position Type: 6 month contract to hire
Clearance Requirement: Active TS/SCI with ability to obtain a polygraph

System One IT is seeking a Cyber Security Engineer to support a mission critical cyber operations program in Springfield, VA. This role focuses on cyber incident response, investigation, containment, documentation, and coordination across Government and contractor teams. The Cyber Security Engineer will support the full lifecycle of security incidents, including triage, analysis, response actions, reporting, and recommendations to improve future defensive cyber operations.

Responsibilities

• Coordinate and support cyber incident response activities across Government and contractor teams
• Perform analysis and documentation of response actions, including containment, remediation, and recovery activities
• Support containment efforts such as IP blocks, domain blocks, account disablement, and other approved defensive measures
• Analyze host, server, network, memory, and system artifact data to support incident investigations
• Develop and identify indicators of compromise and share findings with appropriate cybersecurity stakeholders
• Support malware analysis, signature development, and adversary attribution efforts
• Build incident timelines, briefings, reports, and other documentation for stakeholders
• Document all actions and analysis in approved ticketing and reporting systems with sufficient detail for reconstruction of events
• Coordinate with CSOC Tier 1 and Tier 2 teams to remediate discrepancies and recommend actions to prevent recurrence
• Support Government directed Cyber Incident Response Team activities as required
• Develop and coordinate courses of action with Government and contractor stakeholders
• Conduct quality control reviews of closed CSOC tickets to ensure accurate analysis, categorization, documentation, and notification
• Provide input for daily and weekly CSOC reporting, including significant activity reports, operations updates, and status reports

Required Qualifications

• Active TS/SCI clearance
• Ability to obtain a polygraph
• Bachelor’s degree or 6+ years of cybersecurity experience
• Experience supporting cyber incident response, CIRT, CSOC, SOC, DFIR, threat hunting, or defensive cyber operations
• Experience performing incident triage, investigation, containment, remediation, and reporting
• Familiarity with host, server, network, memory, or system artifact analysis
• Experience developing or identifying indicators of compromise
• Experience documenting incident timelines, analysis, actions taken, and recommendations
• Understanding of DoD cyber operations, incident handling, and reporting processes
• DoD 8570 / 8140 IAT Level II certification
• Ability to meet CSSP Incident Responder requirements

Preferred Qualifications

• Master’s degree
• IAT Level III certification
• Experience supporting NGA, DoD, Intelligence Community, or federal cybersecurity programs
• Experience with malware analysis or reverse engineeringExperience with digital forensics tools and processes
• Experience with JIMS, ICMS, or similar Government incident reporting systems
• Experience developing scripts, tools, or automation to collect and analyze cyber incident data
• Certifications such as CySA+, GCIH, GCIA, GCFA, GCFE, CEH, CISSP, or similar

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.