Cybersecurity Engineer

Enterprise Solutions & Management; Virginia Beach (VA); On-site; USD 90,000 - 125,000; Full time

Job summary

Enterprise Solutions and Management (ESM) seeks a Cybersecurity Engineer to support an enterprise-level program within a federal environment. The role focuses on resolving security challenges across systems and ensuring compliance with security controls throughout the system lifecycle.

Responsibilities include risk management, vulnerability assessments, incident response, and collaboration with government customers to implement and document security requirements.

Qualifications

• Five years of full-time professional experience in system hardening.
• IAT-II or equivalent certifications (CND, CCNA Security, CySA+, GICSP, GSEC, Security+ CE, SSCP).
• Bachelor's Degree in Cybersecurity or related discipline.
• Secret clearance.

Responsibilities

• Perform cybersecurity tasks to resolve system-wide security issues.
• Analyze information security requirements and apply analytical approaches to planning and problem solving.
• Provide security engineering support through the lifecycle of information systems—from planning to integration and testing.

Skills

Cybersecurity principles

Vulnerability assessment

Incident response

Analytical thinking

Cybersecurity frameworks

Communication skills

Creative problem solving

Education

Bachelor's Degree in Cybersecurity

Tools

Assured Compliance Assessment Solution

Job description

Enterprise Solutions and Management (ESM) is a rapidly growing government contractor that provides strategic IT services that meet mission needs for Defense and Federal customers.

Cybersecurity Engineer to support an enterprise-level program within a federal environment.

Job Description and Responsibilities

Performs a variety of routine project tasks focused on specialized cybersecurity challenges, integrating electronic processes and methodologies to resolve system‑wide and technology‑related security issues. Analyzes information security requirements and applies analytical, systematic approaches to address problems involving workflow, organizational processes, and planning. Provides security engineering support throughout the lifecycle of information systems, including planning, design, development, testing, demonstration, and integration activities, ensuring cybersecurity requirements are effectively incorporated and maintained.

Required Knowledge, Skills and Abilities (KSA)

• Strong knowledge of cybersecurity principles, security engineering practices, and risk management frameworks, with the ability to analyze security requirements and implement appropriate technical controls.
• Ability to conduct security analysis, vulnerability assessments, and incident response activities, including identifying threats, investigating security events, documenting findings, and recommending remediation actions.
• Strong analytical and problem‑solving skills with the ability to evaluate workflows, organizational processes, and technical environments to resolve cybersecurity and compliance‑related issues.
• Experience working with cybersecurity frameworks and compliance requirements (e.g., NIST, RMF, FISMA, ISO 27001, or similar), including documentation, security control implementation, audit support, and continuous monitoring activities.

Desired KSA

• Be a positive, self‑motivated, and proactive person with the ability to adapt to change and tolerate stressful situations.
• Candidate must communicate effectively with team Members, team Lead, management, and government Customer.
• Must have the ability and desire to research and develop creative solutions to unique problems with minimal supervision.

Minimum Training, Education, and Certifications

• Five (5) years of full‑time professional experience performing system hardening with demonstrated experience in the following areas:
  • Performing STIG implementation
  • Performing vulnerability assessments with the Assured Compliance Assessment Solution tool
  • Experience with Security Management policy guidance and directives; and remediating vulnerability findings to include implementing vendor patches on both Linux and Windows Operating systems.
• IAT‑II requires one of the following current certifications: CND, CCNA Security, CySA+, GICSP, GSEC, Security+ CE, or SSCP.
• Bachelor's Degree in Cybersecurity or related discipline (High School diploma or Associate’s degree may be substituted with ten (10) years of experience).
• Secret clearance.

Physical Requirements

• Required to stand, walk and sit; communicate verbally both in person and by telephone; use hands to finger, handle or feel objects or controls; reach with hands and arms. Regularly required to stoop, kneel, bend, crouch and lift up to 25 pounds. Specific vision abilities required by this job include close vision, distance vision, depth perception, color vision and the ability to adjust focus.
• Physical demands associated with this position include extensive walking (including stairs) throughout offices and between buildings. May require use of public transportation, personal or Government vehicle to drive to local and or remote office locations.

Additional Requirements

• Other duties as assigned.

ESM provides equal employment opportunity to all individuals regardless of race, color, creed, religion, gender, age, sexual orientation, national origin or ancestry, disability, genetic information, veteran status, gender identification or any other characteristic protected by state, federal or local law.