Cybersecurity Engineer

Parry Labs, LLC; Huntsville (AL); On-site; USD 110,000 - 140,000; Full time

Job summary

Parry Labs, LLC is seeking a skilled Cybersecurity Engineer to apply NIST 800-53 security controls to diverse systems, networks, and embedded platforms. The role supports security engineering across development, implementation, and maintenance of controls, working with senior engineers and stakeholders to deliver mission-ready systems.

The candidate will perform risk assessments, vulnerability management, STIG application, and RMF package support for DoD or prime customer lines, collaborating

Qualifications

• Bachelor's degree in Computer Science or a related engineering field.
• 3-5 years of experience in information systems security engineering.
• Working knowledge of NIST SP 800-53, RMF, and related NIST guidance.
• Familiarity with ISO security standards.
• Experience with vulnerability scanning and management tools such as ACAS (Nessus/SecurityCenter).
• Hands-on experience applying STIGs and NIST controls.

Responsibilities

• Support risk assessments and vulnerability analyses to identify weaknesses across systems and devices.
• Implement and document NIST 800-53 controls in RMF packages.
• Perform vulnerability scanning and remediation using ACAS tools.
• Apply STIGs across OSes, applications, and network devices; document deviations.
• Assist in developing SSPs, POA&Ms, and control implementation statements.
• Participate in A&A activities and security testing.
• Collaborate with engineering teams to remediate security gaps early in the lifecycle.
• Write and review security-relevant system specifications and requirements.
• Assess OS configurations against NIST baselines and STIGs.
• Assist in securing containerized environments (Docker, Kubernetes, OpenShift).
• Stay current with NIST guidance and security technologies.

Skills

Cybersecurity engineering

Risk management

Technical writing

Team collaboration

Communication skills

Education

Bachelor's Degree in Computer Science or related field

Tools

ACAS (Nessus/SecurityCenter)

SCAP Compliance Checker (SCC) or STIG Viewer

Tenable.sc / Nexpose

Job description

Who Are We?

At Parry Labs we believe the modern combat advantage relies on the speed and scale of open systems. We’re redefining the edge of the increasingly ever-changing battlespace by delivering game changing capabilities to our warfighters through digital engineering, software, and hardware solutions that are essential to our core of being a Digital Systems Integrator.

Born digital and agile, Parry Labs is building a winning team to be the premier provider for Next Generation Mission Systems Integration across air, land, sea, space and cyber.

Are you ready to be an instrumental part of experts in the industry? Join us in the innovation of integration at Parry and apply to help develop the technologies of tomorrow while reaching new heights in your career today.

About the Job

We are seeking a skilled Cybersecurity Engineer to join our Parry Labs team. This role requires solid technical expertise in applying NIST 800-53 security controls to unique systems, networks, and embedded platforms. The successful candidate will support information systems security engineering efforts across the development, implementation, and maintenance of security controls, working closely with senior engineers and program stakeholders to deliver secure, mission-ready systems.

Duties and Responsibilities

• Support risk assessments and vulnerability analyses to identify and prioritize security weaknesses across systems, networks, and embedded platforms.
• Implement, tailor, and document NIST 800-53 security controls in support of Risk Management Framework (RMF) authorization packages.
• Perform vulnerability scanning and management using tools such as ACAS (Nessus, SecurityCenter) to identify, track, and remediate system vulnerabilities.
• Apply and validate Security Technical Implementation Guides (STIGs) across operating systems, applications, and network devices; document deviations and compensating controls as needed.
• Assist in developing and maintaining System Security Plans (SSPs), control implementation statements, and Plans of Action and Milestones (POA&Ms).
• Perform security testing and evaluation activities in support of Assessment and Authorization (A&A) efforts.
• Serve as a technical contributor supporting cybersecurity engineering tasks for DoD or prime customer product lines.
• Collaborate with systems, software, and integration engineers to identify and remediate security gaps early in the development lifecycle.
• Write and review security-relevant system specifications and requirements.
• Support the assessment of operating system configurations (Linux, Embedded Linux, VxWorks, Lynx, or Windows) against applicable STIGs and NIST control baselines.
• Assist in securing containerized environments (Docker, Kubernetes, or RedHat OpenShift) across the software development lifecycle.
• Stay current with evolving NIST guidance, security technologies, and industry best practices.
• Other duties as assigned.

Required Qualifications

• Bachelor's Degree in Computer Science or a related engineering field.
• 3-5 years of experience in information systems security engineering.
• Working knowledge of NIST SP 800-53, NIST SP 800-37 (RMF), and related NIST guidance (e.g., 800-171, 800-30).
• Familiarity with ISO security standards.
• Experience with vulnerability scanning and management tools, particularly ACAS (Nessus/SecurityCenter), or comparable tools (e.g., Tenable.sc, Nexpose).
• Hands-on experience applying and assessing compliance against DISA Security Technical Implementation Guides (STIGs), including use of SCAP Compliance Checker (SCC) or STIG Viewer.
• Experience assessing the security posture of at least one of the following: Linux, Embedded Linux, VxWorks, Lynx, or Windows operating system configurations and deployments.
• Experience with security technologies such as firewalls, endpoint security, application whitelisting, intrusion detection/prevention systems, and encryption.
• Exposure to securing software containers or orchestration platforms (Docker, Kubernetes, or RedHat OpenShift).
• Hold a DoDM 8140.03 compliant certification such as Security+, CySA+, or equivalent.
• U.S. Citizenship required. Ability to obtain and maintain a DoD Secret Security Clearance (if not already held).

Preferred Qualifications

• Master's Degree in Computer Science, Information Systems, or a related field.
• Previous experience as a systems engineer or software engineer in the DoD or Aerospace field.
• Familiarity with Zero-Trust principles.
• Programming or scripting experience in Java, C, C++, or Python.
• Exposure to Anti-Tamper practices for DoD weapon systems.
• Progress toward or possession of DoDM 8140.03 Level 3 baseline certification (CISSP, CASP, etc)
• Experience using eMASS or similar RMF tracking tools.
• Experience automating STIG or vulnerability remediation (e.g., Ansible, scripting).

Why Join Parry Labs?

At Parry Labs, we foster a culture of curiosity, collaboration, and diversity. Employees are given the autonomy to leverage their skills in creating state-of-the- art tech solutions that aid in the protection of the American Warfighter. We encourage new and bold ideas that push the status quo. It is this entrepreneurial spirit that drives us.

Parry Labs will support you with workplace flexibility, a commitment to the health and well-being of you and your family and provide opportunities to work with a purpose. We are committed to supporting your success in both your professional and personal lives with benefits such as education assistance and unlimited paid time off, just to name a few.

Accessibility/Accommodation:

If because of a medical condition or disability you need a reasonable accommodation for any part of the employment process, please send an e-mail to [e-mail] or call [phone] to let us know the nature of your request and contact information.

Equal employment opportunity, including veterans and individuals with disabilities.