Cybersecurity Engineer – Cyber Defense Operations (ISSE)

Cybersecurity Jobs; Fort Meade (MD); On-site; USD 140,000 - 170,000; Full time

Job summary

Data Systems Analysts, Inc. seeks a TS/SCI-cleared Cybersecurity Analyst/Engineer to strengthen posture and drive RMF accreditation in a secure DoD environment at Fort Meade, onsite. The role focuses on continuous authorization, vulnerability remediation, and security controls across systems.

You will advise architects and engineers, perform risk assessments, and support incident response while applying DISA STIGs and SCAP benchmarks in Windows and Linux environments.

Qualifications

• BS degree in Engineering or CS; experience may substitute.
• TS/SCI clearance required.
• DoD 8140 IAT II certification required.
• 4+ years hands-on cybersecurity engineering experience.
• Knowledge of RMF, NIST SP 800-53, eMASS, POA&Ms, SSPs, and ATO.
• Strong Windows and Linux, networking, and enterprise security tech.
• Ability to translate requirements into practical security solutions.

Responsibilities

• Serve as a hands-on cybersecurity authority across DoD systems.
• Advise on security requirements, design, risk, and secure implementation.
• Assess architectures for vulnerabilities and mitigations.
• Perform vulnerability assessments and remediation with ACAS/Tenable/SIEM.
• Apply and validate DISA STIGs, SCAP benchmarks, and hardening.
• Support incident response, continuous monitoring, and risk assessments.
• Implement security controls across OS, apps, networks, and endpoints.
• Identify opportunities to automate security processes.
• Guide zero trust, ICAM, cloud, DevSecOps, and AI integration.

Skills

Hands-on cybersecurity engineering

RMF

Continuous Monitoring

Vulnerability management

System hardening

Communication to leadership

Education

BS in Engineering or Computer Science

DoD 8140 (8570) IAT II Certification

Tools

ACAS

Tenable/Nessus

SIEM

DISA STIGs

SCAP benchmarks

eMASS

POA&Ms

SSPs

Windows

Linux

PowerShell

Python

Ansible

APIs

Job description

Support enterprise cybersecurity missions in a secure DoD environment as a TS/SCI-cleared Cybersecurity Analyst / Engineer. This role focuses on strengthening security posture, driving compliance and accreditation through RMF, and helping teams operationalize Continuous Authorization and Continuous Monitoring practices.

Location: Fort Meade, MD (onsite). For onsite support at the National Ground Intelligence Center (NGIC) in Charlottesville, VA, candidates willing to relocate to the Charlottesville area are encouraged to apply.

Compensation: USD 140,000 - 170,000 per year.

What you’ll do

• Serve as a hands-on cybersecurity technical authority, providing guidance and solving complex security challenges across DoD systems, applications, networks, and enterprise environments.
• Advise architects, system owners, engineers, administrators, and cybersecurity personnel on security requirements, system design, technical risk, and secure implementation.
• Assess system architectures, configurations, technologies, and proposed solutions to identify vulnerabilities, security risks, and mitigation strategies.
• Conduct vulnerability assessment and remediation using ACAS, Tenable/Nessus, SIEM, and other cybersecurity tools.
• Apply, validate, and troubleshoot DISA STIGs, SCAP benchmarks, security controls, configuration baselines, and system-hardening requirements.
• Support incident response, Continuous Monitoring (ConMon), vulnerability management, and ongoing assessment of system security posture.
• Implement and validate cybersecurity controls across operating systems, applications, networks, endpoints, and enterprise infrastructure.
• Identify opportunities to automate security assessments, vulnerability management, configuration validation, control testing, and other cybersecurity processes.
• Evaluate emerging technologies, modernization efforts, and architectural changes to identify cybersecurity requirements, technical risks, and secure implementation approaches.
• Provide cybersecurity engineering guidance across initiatives including Zero Trust, ICAM, cloud, DevSecOps, data-centric security, software supply chain security, security automation, and Artificial Intelligence (AI).
• Support RMF, ATO, and continuous authorization work, including SSPs, POA&Ms, eMASS, security controls, risk assessments, and supporting technical evidence.
• Communicate complex cybersecurity risks, technical findings, remediation strategies, and security posture to technical teams, system owners, mission stakeholders, and leadership.

Required qualifications

• BS degree in Engineering, Computer Science, or related field (experience may be substituted for degree).
• TS/SCI Clearance.
• DoD 8140 (8570) IAT Level II Certification.
• Minimum 4 years of hands-on cybersecurity engineering experience, preferably supporting DoD or Intelligence Community environments.
• Strong knowledge of cybersecurity engineering principles and DoD cybersecurity requirements, with ability to translate requirements into practical technical solutions.
• Experience assessing system architectures and technical implementations and providing cybersecurity guidance to architects, engineers, administrators, and system owners.
• Hands-on experience with vulnerability management, system hardening, DISA STIGs, SCAP, ACAS, Tenable/Nessus, and remediation of technical findings.
• Strong working knowledge of Windows and Linux systems, networking, authentication, access controls, and enterprise security technologies.
• Experience implementing, assessing, and validating security controls across systems, applications, networks, and enterprise environments.
• Practical knowledge of RMF, Continuous Monitoring, NIST SP 800-53, eMASS, POA&Ms, SSPs, and ATO processes.
• Ability to independently analyze complex cybersecurity problems, develop effective technical solutions, and clearly communicate risks and recommendations to technical teams and leadership.

Helpful experience

• Advanced cybersecurity certifications such as CISSP, CGRC/CAP, CISM, CASP+/SecurityX, CySA+, CEH, or other relevant options.
• Experience with SIEM, endpoint security, IDS/IPS, firewalls, incident response, or defensive cyber operations.
• Experience with Zero Trust, ICAM, cloud security, DevSecOps, data-centric security, continuous authorization, or software supply chain security.
• Experience evaluating AI/ML technologies and providing cybersecurity guidance for secure integration into enterprise environments.
• Experience with PowerShell, Python, Ansible, APIs, or other scripting and security automation technologies.
• Experience integrating cybersecurity requirements into system architecture, modernization, emerging technologies, and technology refresh efforts.

Tools and technologies

ACAS, Tenable/Nessus, SIEM, DISA STIGs, SCAP and SCAP benchmarks, Zero Trust, ICAM, DevSecOps, Artificial Intelligence (AI), RMF, ATO, Continuous Monitoring (ConMon), NIST SP 800-53, eMASS, POA&Ms, SSPs, Windows, Linux, PowerShell, Python, Ansible, APIs, and Microsoft Copilot.

Eligibility and equal opportunity

Many roles require the ability to obtain a security clearance. Clearances may only be granted to U.S. citizens. Conditional offers may be subject to government security investigation(s) and applicants must meet eligibility requirements for access to classified information.

Data Systems Analysts, Inc. is an Equal Opportunity Employer and an E-Verify Employer. DSA is committed to maintaining a workplace free from unlawful discrimination, and all qualified applicants will receive consideration without regard to protected status. DSA requires background checks where permitted by law.