Cyber Security Engineer, Mid/Senior

Simulation Technologies Inc. (SimTech); Huntsville (AL); On-site; USD 90,000 - 150,000; Full time

Benefits offered by this job

Great benefits

Work-life balance

Retirement plan

Career advancement

Job summary

SimTech, Inc. in Huntsville, AL is seeking a Cyber Security Engineer, Mid/Senior to ensure DoD compliance across software, systems, and networks. You will conduct security assessments, vulnerability analyses, and RMF package development, coordinating with stakeholders and leveraging ESS and related tools.

The role requires 5+ years in cybersecurity, DoD exposure, and solid experience with DoD tools (eMASS, STIGs, ACAS/Nessus); travel up to ~10% may be needed.

Qualifications

• Bachelor's degree in Computer Science or related field, or equivalent experience.
• Mid and Senior-Level candidates considered (5-20 years).
• 5+ years of cybersecurity experience, preferably supporting DoD environments.
• 5+ years of experience administering and securing Red Hat Enterprise Linux (RHEL).
• 5+ years of experience with DoD cybersecurity tools and processes, including eMASS, STIGs, IAVAs, ACAS/Nessus, SCAP, and RMF documentation.
• 5+ years of experience conducting vulnerability assessments, system audits, POA&M management, and RMF package development.
• 5+ years of experience working with cybersecurity frameworks and standards such as NIST and NISPOM.
• 5+ years of technical writing skills to include SOPs

Responsibilities

• Utilize best practices for monitoring, auditing, and measuring risk, compliance, and assurance.
• Ensure risk, compliance, and assurance efforts conform to DoW security, resilience, and dependability requirements at software, system, and network levels.
• Document preliminary or residual security risks for system operation.
• Verify that authorization and assurance documentation is current.
• Monitor and evaluate compliance with DoW requirements, performing validation steps and analyzing results.
• Provide technical evaluation of security posture and vulnerabilities against applicable NIST controls.
• Recommend new or revised security measures based on risk analysis and verify implementations.
• Operate DoW tools and security monitoring solutions (Elastic ESS, etc.).
• Conduct regular audits to ensure security policies are implemented as defined in the security plan.
• Perform annual inspections with technical scans at domestic/foreign sites (~10% travel).
• Data collection, documentation, and reporting; support Elastic platform knowledge base.

Skills

Cybersecurity expertise

RMF documentation

NIST/NISPOM frameworks

Vulnerability assessment

Technical writing

Education

Bachelor's degree in CS or related field

Tools

eMASS

STIGs

ACAS/Nessus

SCAP

Job description

SimTech, Inc., recognized as one of the 2026 Best Places for Working Parents, is seeking a Cyber Security Engineer, Mid/Senior to join our dynamic and diverse team in Huntsville, AL. This is an upcoming opening with opportunities for growth and professional development.

SimTech offers a market leading compensation package with excellent benefits, work/life balance, outstanding retirement plan, career advancement and much more.

The Cyber Security Engineer, Mid/Senior is responsible for ensuring software applications, systems, and networks comply with Department of Defense cybersecurity and risk management requirements. This role conducts security assessments, vulnerability analysis, compliance audits, and continuous monitoring to evaluate and strengthen system security.

Responsibilities

• Utilizing best practices and methods for monitoring, auditing, and measuring risk, compliance, and assurance efforts.
• Ensuring risk, compliance, and assurance efforts conform to Department of War (DoW) security, resilience, and dependability requirements at the software application, system, and network levels.
• Documenting preliminary or residual security risks for system operation.
• Verifying that the software application/network/system authorization and assurance documentation is current.
• Monitoring and evaluating a system's compliance with DoW security, resilience, and dependability requirements including performing validation steps, comparing actual results with expected results and analyzing the differences to identify impact and risks.
• Provide an accurate technical evaluation of the software application, system, or network, documenting the security posture, capabilities, and vulnerabilities against applicable NIST controls.
• Recommending new or revised security measures and countermeasures based on risk analysis then verifying that security postures are implemented as stated, document deviations, and recommend required actions to correct those deviations.
• Responsible for the operation of DOW tools, security monitoring and auditing solution utilizing a COTS product i.e. (Elastic Endpoint Security Solutions (ESS), etc.) and industry wide best practices.
• Conducts regular audits to ensure that systems are being operated securely, and information systems security policies and procedures are being implemented as defined in the security plan.
• Conduct annual inspections to validate system updates, configuration compliance utilizing technical scans, and physical observations at domestic and foreign sites (~10% travel).
• Data collection, documentation and reporting on all the above responsibilities as required. Perform other duties as assigned to realize mission success.
• Support Stakeholders in the operation of the comprehensive Elastic platform in terms of know-how and the technologies used.
• Performs other duties as assigned.

Experience Requirements

Minimum Qualifications & Education Requirements and Desired Skillsets

• Bachelor's degree in Computer Science or a related field, or equivalent experience (experience may be substituted for a degree).
• Mid and Senior-Level candidates considered (5-20 years).
• 5+ years of cybersecurity experience, preferably supporting Department of Defense (DoD) environments.
• 5+ years of experience administering and securing Red Hat Enterprise Linux (RHEL) operating systems.
• 5+ years of experience with DoD cybersecurity tools and processes, including eMASS, STIGs, IAVAs, ACAS/Nessus, SCAP, and RMF documentation.
• 5+ years of experience conducting vulnerability assessments, system audits, POA&M management, and RMF package development.
• 5+ years of experience working with cybersecurity frameworks and standards such as NIST and NISPOM.
• 5+ years of technical writing skills to include SOPs