CyberSecurity Engineer

Socket.dev; Arlington (VA); Hybrid; USD 120,000 - 170,000; Full time

Job summary

Spatial Front, Inc. in Arlington, VA seeks a Cybersecurity Engineer to secure a 900+ server enterprise, lead vulnerability management, STIG application, and RMF/ATO lifecycle for a federal client. You will conduct continuous monitoring, prepare RMF artifacts, manage POA&Ms, and present metrics to agency leadership.

Requires 5+ years of cybersecurity engineering, active Secret clearance, U.S. citizenship, and a bachelor's degree in a related field.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent operational experience).
• 5+ years of dedicated cybersecurity engineering experience.
• Active CompTIA Security+ (IAT Level II compliant).

Responsibilities

• Vulnerability Assessment & Mitigation across 900+ servers.
• Compliance & Hardening using STIGs across large-scale infrastructure.
• RMF & Authorization artifacts preparation and maintenance (eMASS).
• POA&M management for open vulnerabilities and non-compliant controls.
• Security reporting & ongoing monitoring for federal stakeholders.

Skills

Vulnerability management

RMF

POA&Ms management

Security reporting

Education

Bachelor’s degree in Cybersecurity or related field

Tools

ACAS/Tenable.sc

STIG Viewer

eMASS

DISA STIGs

Splunk

Audit Vault

Job description

Spatial Front, Inc. (SFI), a two-time USA Today Top Workplaces awardee and Washington Top Workplaces honoree, is a fast-growing federal technology solutions provider. We bring together innovative technologies, industry best practices, and top-notch talent to address our federal clients’ most critical mission needs.

As an ISO 9001, 20000, 27001, and CMMI Level 3 certified organization, SFI delivers high-impact cybersecurity, enterprise IT, and cloud engineering across the public sector. At SFI, you will work alongside subject matter experts in an open, collaborative environment dedicated to continuous learning and technical excellence.

Position Overview

Spatial Front is seeking a Cybersecurity Engineer to support and secure mission-critical infrastructure across a large enterprise environment comprising 900+ servers. In this role, you will lead hands‑on vulnerability management, security compliance, and Risk Management Framework (RMF) authorization processes. You will serve as a technical expert responsible for continuous scanning, STIG application, POAM tracking, and remediation strategies to safeguard our federal client’s assets.

Location: Arlington, VA (hybrid/On-Site)

Responsibilities

• Vulnerability Assessment & Mitigation: Perform automated and credentialed enterprise vulnerability scans across 900+ Windows/Linux server assets using Assured Compliance Assessment Solution (ACAS / Tenable.sc). Analyze raw scan results, evaluate true/false positives, prioritize risk, and coordinate patch/remediation workflows with systems administrators.
• Compliance & Hardening: Execute end-to-end Security Technical Implementation Guide (STIG) application and evaluation across large-scale server infrastructures. Validate compliance utilizing DISA STIG Viewer and automated benchmarks (SCAP Content).
• RMF & Authorization Artifacts: Lead and support Risk Management Framework (RMF) Steps 1 through 6 lifecycle activities. Prepare, maintain, and upload standard compliance artifacts into Enterprise Mission Assurance Support Service (eMASS) to maintain continuous Authority to Operate (ATO) posture.
• POA&M Management: Author, manage, and track Plans of Action and Milestones (POA&Ms) for open vulnerabilities and non-compliant controls. Work with stakeholders to define mitigation strategies, root cause analyses, and realistic completion milestones.
• Security Reporting & Ops: Drive continuous monitoring strategies, presenting vulnerability and compliance metrics to agency leadership and federal stakeholders.

Requirements

• Clearance: Must be a U.S. Citizen with an active Secret Clearance (or ability to obtain/pass a federal background investigation).
• Education & Experience: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent operational experience) + 5+ years of dedicated cybersecurity engineering experience.
• Certifications: Active CompTIA Security+ (IAT Level II compliant).
• Hands-On Scale Experience:
  • Proven experience conducting ACAS scans and vulnerability analysis across large environments (900+ servers).
  • Direct experience applying and evaluating DISA STIGs at enterprise scale.
  • Deep working knowledge of DoD RMF processes and direct experience navigating eMASS.
  • Strong proficiency in writing, managing, and closing out POA&Ms.

Desired / Nice-To-Have Qualifications

• Identity & Access Management: Hands‑on experience with Identity, Credential, and Access Management (ICAM), including user provisioning, role‑based access control (RBAC), and access review tracking.
• Log Management & Auditing: Practical experience analyzing audit logs, building dashboards, and configuring security alerts using Splunk and Audit Vault systems.
• Advanced Certifications: CISSP (Certified Information Systems Security Professional), CISM, or CASP+.
• Experience with automated vulnerability/patch management tooling and scripting (e.g., PowerShell, Python, or Bash).

Additional Information

Clearance: Must be a U.S. Citizen with an active Secret security clearance or the ability to obtain one.

Work Environment: On-site/Hybrid as required by the contract and program.

Benefits: SFI offers a comprehensive benefits package. Details available at SFI Careers.

This is a full‑time, W2 position.

No agencies, third parties, or Corp-to-Corp submissions.

Spatial Front Inc. is an Equal Opportunity Employer - all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status.

SFI participates in E-Verify.