Cybersecurity Engineer

Esmcorp; Virginia Beach (VA); On-site; USD 90,000 - 140,000; Full time

Job summary

Enterprise Solutions and Management (ESM) is seeking a Cybersecurity Engineer to support an enterprise-level program within a federal environment. The role involves implementing security controls across the system lifecycle and supporting assessment activities.

The candidate should have strong knowledge of cybersecurity principles, risk management, and incident response, with experience in NIST RMF, FISMA, and ISO 27001 frameworks. Prior government contracting experience is preferred.

Qualifications

• Five years of full-time professional experience performing system hardening and security engineering tasks.
• Experience with vulnerability assessments using ACAS or equivalent tooling and Remediating findings.
• Bachelor's Degree in Cybersecurity or related discipline; substitutions allowed per policy.

Responsibilities

• Performs routine tasks addressing cybersecurity challenges and security requirements throughout the system lifecycle.
• Analyzes information security requirements and applies systematic approaches to resolve security issues.
• Provides security engineering support from planning through integration activities to maintain cybersecurity controls.

Skills

Cybersecurity principles

Security engineering practices

Risk management frameworks

Security analysis

Vulnerability assessments

Incident response

NIST RMF ISO 27001

Education

Bachelor's degree in Cybersecurity or related discipline

HS diploma or Associate degree with 10 years experience

Tools

ACAS

STIG

Job description

Enterprise Solutions and Management (ESM) is a rapidly growing government contractor that provides strategic IT services that meet mission needs for Defense and Federal customers. We are hiring a Cybersecurity Engineer to support an enterprise-level program within a federal environment.

Job Description and Responsibilities

Performs a variety of routine project tasks focused on specialized cybersecurity challenges, integrating electronic processes and methodologies to resolve system‑wide and technology‑related security issues. Analyzes information security requirements and applies analytical, systematic approaches to address problems involving workflow, organizational processes, and planning. Provides security engineering support throughout the lifecycle of information systems, including planning, design, development, testing, demonstration, and integration activities, ensuring cybersecurity requirements are effectively incorporated and maintained.

Required Knowledge, Skills and Abilities (KSA)

• Strong knowledge of cybersecurity principles, security engineering practices, and risk management frameworks, with the ability to analyze security requirements and implement appropriate technical controls.
• Ability to conduct security analysis, vulnerability assessments, and incident response activities, including identifying threats, investigating security events, documenting findings, and recommending remediation actions.
• Strong analytical and problem‑solving skills with the ability to evaluate workflows, organizational processes, and technical environments to resolve cybersecurity and compliance‑related issues.
• Experience working with cybersecurity frameworks and compliance requirements (e.g., NIST, RMF, FISMA, ISO 27001, or similar), including documentation, security control implementation, audit support, and continuous monitoring activities.

Desired KSA

• Be a positive, self‑motivated, and proactive person with the ability to adapt to change and tolerate stressful situations.
• Candidate must communicate effectively with team members, team lead, management, and government customer.
• Must have the ability and desire to research and develop creative solutions to unique problems with minimal supervision.

Minimum Training, Education, and Certifications

• Five (5) year of full‑time professional experience performing system hardening with demonstrated experience in the following areas:
  • Performing STIG implementation
  • Performing vulnerability assessments with the Assured Compliance Assessment Solution tool
  • Experience with Security Management policy guidance and directives; and Remediating vulnerability findings to include implementing vendor patches on both Linux and Windows Operating systems.
• IAT‑II requires one of the following current certifications: CND, CCNA Security, CySA+, GICSP, GSEC, Security + CE, or SSCP.
• Bachelor's Degree in Cybersecurity or related discipline (High School diploma or Associates degree may be substituted with ten (10) years of experience).

Minimum Clearance

• Secret

Physical Requirements

• Required to stand, walk and sit; communicate verbally both in person and by telephone; use hands to finger, handle or feel objects or controls; reach with hands and arms. Regularly required to stoop, kneel, bend, crouch and lift up to 25 pounds. Specific vision abilities required by this job include close vision, distance vision, depth perception, color vision and the ability to adjust focus.
• Physical demands associated with this position include extensive walking (including stairs) throughout offices and between buildings. May require use of public transportation, personal or Government vehicle to drive to local and/or remote office locations.

Additional Requirements

• Other duties as assigned

ESM provides equal employment opportunity to all individuals regardless of race, color, creed, religion, gender, age, sexual orientation, national origin or ancestry, disability, genetic information, veteran status, gender identification or any other characteristic protected by state, federal or local law.