Cybersecurity Engineer

Quantum Sky; Virginia Beach (VA); On-site; USD 100,000 - 112,000; Full time

Benefits offered by this job

Health/Dental/Vision

401(k) match

Paid Time Off

STD/LTD/Life Insurance

Referral Bonuses

Professional development reimbursement

Parental leave

Job summary

Quantum Sky is seeking a Cybersecurity Engineer to support a Government Program Management Office in Virginia Beach, VA. The role involves implementing RMF across the system development life cycle, preparing SSP/SAP/RAR and A&A packages, and ensuring authorization to operate.

On-site work at Dam Neck, with duties spanning vulnerability review, documentation, and program engagement with stakeholders. A Secret clearance is expected; salary ranges between $100,000 and $112,000, with competitive

Qualifications

• Four or more years of IT security experience including RMF and A&A.
• Bachelor’s degree in computer science, cybersecurity, information systems, or related field; or an Associate’s with six+ years cybersecurity experience.
• CSWF Intermediate Level knowledge/skills (IAT II).
• Strong understanding of DoD cybersecurity policies, RMF steps and ATO process.
• Experience operating DISA tools and eMASS functionality.

Responsibilities

• Provide cybersecurity engineering support across SDLC and ensure security requirements are integrated into system architecture and design.
• Apply RMF life cycle steps to achieve Authorization to Operate (ATO) and maintain security baselines and documentation in eMASS.
• Support cybersecurity architecture and A&A processes and communicate with program office and technical stakeholders.

Skills

RMF methodology

A&A process

CSWF Intermediate Level

DOD cybersecurity policies

communication with leadership

Education

Bachelor’s Degree in CS/Cybersecurity/IS

Associate’s Degree + 6+ yrs cybersecurity

Tools

eMASS

STIG Viewer

ACAS

SCAP

Job description

Description

Quantum Sky is searching for a Cybersecurity Engineer to support a Government Program Management Office in Virginia Beach, VA.

Responsibilities:

• Work location is on government site in Virginia Beach, Dam Neck Activity (DNA).
• Provide cybersecurity engineering support as part of the system development life cycle (SDLC). Ensure security requirements are integrated into the system architecture, design, development, testing, assessment, authorization, delivery, and sustainment.
• Apply the cybersecurity risk management framework (RMF) to program information systems in accordance with NIST SP 800-37 (RMF for Information Systems and Organizations) and DoDI 8510.01 (RMF for DoD Information Technology).
• Implement the RMF life cycle steps to achieve system authorization and operation. Build, maintain, and track system’s cybersecurity baselines and security authorization documentation to the Enterprise Mission Assurance Support Service (eMASS).
• Provide support to cybersecurity architecture and assessment & authorization (A&A) processes, ultimately leading to Authority to Operate (ATO) decision.
• Identify and employ cybersecurity best practices for the organization. Create a well-informed plan based on DOD and Navy cybersecurity strategy and manage the adaption process. Incorporate security management into hardware, software, and applications.
• Assist Government managers with information security oversight, policy analysis, IT product acquisition, and program execution in accordance with NIST SP 800-39 (Managing Information Security Risk: Organization, Mission, and Information System View) and the DoDI 8500.01 (Defense Cybersecurity Program).
• Engage with Program Office managers and technical stakeholders to interpret technical requirements, standards/policies, architectural artifacts, budget development, implementation, auditing, program briefs, and continuous monitoring.
• Review Assured Compliance Assessment Solution (ACAS) vulnerability scans. Review, analyze and evaluate Security Technical Implementation Guides (STIGs) and Security Content Automation Protocol (SCAP) content for each applicable system component.
• Prepare and review documentation to include Systems Security Plans (SSP), Security Assessment Plans (SAP), Risk Assessment Reports (RAR), A&A packages, and System Requirements Traceability Matrices (SRTMs).

Qualifications

Required:

• Four (4) or more years of experience in IT security, including RMF methodology and A&A.
• Bachelor’s Degree in computer science, cybersecurity, information systems, or other related technical discipline; or Associate’s Degree and six (6) or more years of cybersecurity experience.
• Cybersecurity Workforce (CSWF) Intermediate Level knowledge/skills (IAT Level II), with specific course completion or renewal certificate.
• Exceptional understanding of DOD cybersecurity policies, RMF steps and structure, A&A process, and gaining system authorization to operate (ATO).
• Ability to operate and execute DISA tools, STIG Viewer, eMASSter and a strong familiarity with eMASS functionality.
• Strong communication skills with all levels of the IT workforce and can translate complex technical topics for senior decision-makers. Prepare/deliver presentations to leadership.

Desired:

• Familiarity with Department of the Navy cybersecurity policies, organizations, and missions.
• Cybersecurity Workforce (CSWF) Advanced Level knowledge/skills (IAT Level III).

Location:

• Virginia Beach, VA

Clearance:

• Current active Secret clearance as reported in DISS.

About Tyto Athene

Compensation:

• Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically between $100,000-$112,000. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.

Benefits:

• Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave.

The world the mission operates in is going post-quantum, contested, and machine-speed. Quantum Sky engineers the advantage across cyber, networks, software, and quantum because the mission demands dominance, not parity. We don't follow the map. We draw it.

At Quantum Sky, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamQuantumSky?

Quantum Sky Engineering LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.