Cybersecurity Engineer – Cyber Defense Operations (ISSE)

Data Systems Analysts, Inc.; Charlottesville (VA); On-site; USD 140,000 - 170,000; Full time

Job summary

Data Systems Analysts, Inc. in Charlottesville, VA, is seeking a TS/SCI-cleared Cybersecurity Engineer to support RMF documentation, accreditation, and security readiness in a secure DoD environment.

The role collaborates with technical and compliance teams to strengthen vulnerability management, apply STIGs, and sustain authorization across enterprise systems. Onsite at NGIC, relocation encouraged for qualified candidates.

Qualifications

• BS degree or equivalent experience in a related field.
• Hands-on cybersecurity engineering experience in DoD/IC.
• Understanding of RMF, security controls, and ATO processes.

Responsibilities

• Serve as a hands-on cybersecurity authority across DoD systems.
• Advise architects, system owners and engineers on security requirements and secure implementation.
• Assess architectures and configurations to identify vulnerabilities and mitigation strategies.
• Perform vulnerability assessment and remediation using ACAS, Nessus, SIEM, and other tools.
• Apply, validate, and troubleshoot DISA STIGs, SCAP benchmarks, and system hardening requirements.
• Support incident response, Continuous Monitoring, vulnerability management, and ongoing assessment of posture.
• Implement and validate cybersecurity controls across OS, apps, networks, and endpoints.
• Identify opportunities to automate security assessments and control testing.

Skills

Vulnerability management

RMF processes

Cybersecurity engineering

Education

BS degree in Engineering, Computer Science, or related field

Tools

ACAS

Tenable/Nessus

SIEM

eMASS

DISA STIGs

Job description

Cybersecurity Engineer – Cyber Defense Operations (ISSE)

All hired employees are expected to have experience with Microsoft Copilot and / or an approved equivalent AI solution.

Description

Data Systems Analysts, Inc. (DSA) is seeking a TS/SCI-cleared Cybersecurity Engineer to support the security posture, compliance, and accreditation of enterprise systems in a secure DoD environment. The selected candidate will play a key role in maintaining cybersecurity readiness, supporting Risk Management Framework (RMF) processes, and ensuring the confidentiality, integrity, and availability of mission critical systems.

The Cybersecurity Engineer will collaborate with both technical and compliance teams, supporting initiatives from vulnerability remediation and control implementation to RMF documentation and authorization sustainment. This role is suited for professionals with a strong foundation in DoD cybersecurity operations

This position is onsite at the National Ground Intelligence Center (NGIC) in Charlottesville, VA. Candidates willing to relocate to the Charlottesville area are encouraged to apply.

Responsibilities:

• Serve as a hands‑on cybersecurity technical authority, providing guidance and solving complex security challenges across DoD systems, applications, networks, and enterprise environments.
• Advise architects, system owners, engineers, administrators, and cybersecurity personnel on security requirements, system design, technical risk, and secure implementation.
• Assess system architectures, configurations, technologies, and proposed solutions to identify vulnerabilities, security risks, and appropriate mitigation strategies.
• Perform vulnerability assessment and remediation using ACAS, Tenable/Nessus, SIEM, and other cybersecurity tools.
• Apply, validate, and troubleshoot DISA STIGs, SCAP benchmarks, security controls, configuration baselines, and system‑hardening requirements.
• Support incident response, Continuous Monitoring (ConMon), vulnerability management, and ongoing assessment of system security posture.
• Implement and validate cybersecurity controls across operating systems, applications, networks, endpoints, and enterprise infrastructure.
• Identify opportunities to automate security assessments, vulnerability management, configuration validation, control testing, and other cybersecurity processes.
• Evaluate emerging technologies, modernization efforts, and architectural changes to identify cybersecurity requirements, technical risks, and secure implementation approaches.
• Provide cybersecurity engineering guidance for initiatives including Zero Trust, ICAM, cloud, DevSecOps, data‑centric security, software supply chain security, security automation, and Artificial Intelligence (AI).
• Provide technical expertise supporting RMF, ATO, and continuous authorization, including SSPs, POA&Ms, eMASS, security controls, risk assessments, and supporting technical evidence.
• Communicate complex cybersecurity risks, technical findings, remediation strategies, and security posture to technical teams, system owners, mission stakeholders, and leadership.

Required Education, Certifications and Security Clearance

• BS degree in Engineering, Computer Science, or related field
  • Experience may be substituted for degree.
• TS/SCI Clearance

Requirements Experience/Qualifications:

• Minimum 4 years of hands‑on cybersecurity engineering experience, preferably supporting DoD or Intelligence Community environments.
• Strong knowledge of cybersecurity engineering principles and DoD cybersecurity requirements, with the ability to translate requirements into practical technical solutions.
• Experience assessing system architectures and technical implementations and providing cybersecurity guidance to architects, engineers, administrators, and system owners.
• Hands‑on experience with vulnerability management, system hardening, DISA STIGs, SCAP, ACAS, Tenable/Nessus, and remediation of technical findings.
• Strong working knowledge of Windows and Linux systems, networking, authentication, access controls, and enterprise security technologies.
• Experience implementing, assessing, and validating security controls across systems, applications, networks, and enterprise environments.
• Practical knowledge of RMF, Continuous Monitoring, NIST SP 800-53, eMASS, POA&Ms, SSPs, and ATO processes.
• Ability to independently analyze complex cybersecurity problems, develop effective technical solutions, and clearly communicate risks and recommendations to technical teams and leadership.

Preferred Experience/Qualifications:

• CISSP, CGRC/CAP, CISM, CASP+/SecurityX, CySA+, CEH, or other relevant advanced cybersecurity certification.
• Experience with SIEM, endpoint security, IDS/IPS, firewalls, incident response, or defensive cyber operations.
• Experience with Zero Trust, ICAM, cloud security, DevSecOps, data‑centric security, continuous authorization, or software supply chain security.
• Experience evaluating AI/ML technologies and providing cybersecurity guidance for their secure integration into enterprise environments.
• Experience with PowerShell, Python, Ansible, APIs, or other scripting and security automation technologies.
• Experience integrating cybersecurity requirements into system architecture, modernization, emerging technologies, and technology refresh efforts.

#DSA209

#LI-MH1

The posted salary range is a good‑faith estimate. Actual compensation will be based on the selected candidate’s qualifications, experience, skills, and other job‑related factors.

DSA - Salary Pay Range

$140,000 - $170,000 USD

Many of DSA's positions require the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens. In addition, applicants who accept a conditional offer of employment may be subject to government security investigation(s) and must meet eligibility requirements for access to classified information. DSA is proud to be an Equal Opportunity Employer. DSA is committed to treating all employees and applicants for employment with respect and dignity and maintaining a workplace that is free from unlawful discrimination. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status. DSA requires background checks , where permitted , by law. DSA is an E-Verify Employer.