CyberSecurity Engineer

Spatial Front, Inc; Arlington (VA); Hybrid; USD 100,000 - 150,000; Full time

Benefits offered by this job

Comprehensive benefits

On-site/Hybrid work

EOE

Job summary

Spatial Front, Inc. is seeking a Cybersecurity Engineer to secure and manage risk across a 900+ server enterprise. You will lead vulnerability management, RMF authorization, and STIG implementation to maintain continuous ATO posture in a large federal environment.

You must be a U.S. citizen with an active Secret clearance and a bachelor’s degree in a related field, with 5+ years of hands-on cybersecurity engineering experience.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS or related field.
• 5+ years of dedicated cybersecurity engineering experience.
• Active CompTIA Security+ (IAT Level II)

Responsibilities

• Perform vulnerability scans across 900+ servers and coordinate remediation with systems admins.
• Apply and evaluate DISA STIGs at enterprise scale and validate compliance.
• Lead RMF steps 1–6 and maintain artifacts in eMASS for continuous ATO posture.
• Write, track, and close POA&Ms with stakeholders; define milestones.
• Provide security metrics and reports to leadership and federal stakeholders.

Skills

Cybersecurity engineering

RMF & DoD processes

POA&M management

Vulnerability management

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

ACAS / Tenable.sc

DISA STIGs

eMASS

Job description

Description

Spatial Front, Inc. (SFI), a two-time USA Today Top Workplaces awardee and Washington Top Workplaces honoree, is a fast-growing federal technology solutions provider. We bring together innovative technologies, industry best practices, and top-notch talent to address our federal clients’ most critical mission needs.

Job Type

Full-time

Position Overview

Spatial Front is seeking a Cybersecurity Engineer to support and secure mission-critical infrastructure across a large enterprise environment comprising 900+ servers.

In this role, you will lead hands-on vulnerability management, security compliance, and Risk Management Framework (RMF) authorization processes. You will serve as a technical expert responsible for continuous scanning, STIG application, POAM tracking, and remediation strategies to safeguard our federal client’s assets.

Location: Arlington, VA (hybrid/On-Site)

Responsibilities

• Vulnerability Assessment & Mitigation: Perform automated and credentialed enterprise vulnerability scans across 900+ Windows/Linux server assets using Assured Compliance Assessment Solution (ACAS / Tenable.sc). Analyze raw scan results, evaluate true/false positives, prioritize risk, and coordinate patch/remediation workflows with systems administrators.
• Compliance & Hardening: Execute end-to-end Security Technical Implementation Guide (STIG) application and evaluation across large-scale server infrastructures. Validate compliance utilizing DISA STIG Viewer and automated benchmarks (SCAP Content).
• RMF & Authorization Artifacts: Lead and support Risk Management Framework (RMF) Steps 1 through 6 lifecycle activities. Prepare, maintain, and upload standard compliance artifacts into Enterprise Mission Assurance Support Service (eMASS) to maintain continuous Authority to Operate (ATO) posture.
• POA&M Management: Author, manage, and track Plans of Action and Milestones (POA&Ms) for open vulnerabilities and non-compliant controls. Work with stakeholders to define mitigation strategies, root cause analyses, and realistic completion milestones.
• Security Reporting & Ops: Drive continuous monitoring strategies, presenting vulnerability and compliance metrics to agency leadership and federal stakeholders.

Requirements

• Clearance: Must be a U.S. Citizen with an active Secret Clearance (or ability to obtain/pass a federal background investigation).
• Education & Experience: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent operational experience) + 5+ years of dedicated cybersecurity engineering experience.
• Certifications: Active CompTIA Security+ (IAT Level II compliant).
• Hands-On Scale Experience:
  • Proven experience conducting ACAS scans and vulnerability analysis across large environments (900+ servers).
  • Direct experience applying and evaluating DISA STIGs at enterprise scale.
  • Deep working knowledge of DoD RMF processes and direct experience navigating eMASS.
  • Strong proficiency in writing, managing, and closing out POA&Ms.

Desired / Nice-To-Have Qualifications

• Identity & Access Management: Hands-on experience with Identity, Credential, and Access Management (ICAM), including user provisioning, role-based access control (RBAC), and access review tracking.
• Log Management & Auditing: Practical experience analyzing audit logs, building dashboards, and configuring security alerts using Splunk and Audit Vault systems.
• Advanced Certifications: CISSP (Certified Information Systems Security Professional), CISM, or CASP+.
• Experience with automated vulnerability/patch management tooling and scripting (e.g., PowerShell, Python, or Bash).

Additional Information

• Clearance: Must be a U.S. Citizen with an active Secret security clearance or the ability to obtain one.
• Work Environment: On-site/Hybrid as required by the contract and program.
• Benefits: SFI offers a comprehensive benefits package. Details available at SFI Careers.
• This is a full-time, W2 position.
• No agencies, third parties, or Corp-to-Corp submissions.
• Spatial Front Inc. is an Equal Opportunity Employer — all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status.
• SFI participates in E-Verify.

Salary Description

$100,000-150,000