Cybersecurity Engineer II

Cybersecurity Jobs; Virginia Beach (VA); On-site; USD 95,000 - 115,000; Full time

Benefits offered by this job

Medical benefits

401(k) match

Generous PTO accrual

Professional development reimbursement

Certification funding

Job summary

DirectViz Solutions (DVS) seeks a Cybersecurity Engineer II to support DoD cybersecurity compliance and authorization activities in a hands-on environment. The role focuses on system hardening, vulnerability management, continuous monitoring, and maintaining artifacts for accurate authorization posture.

Based in Virginia Beach, VA on-site, you will work with DoD/Navy requirements, perform ACAS/SCAP/STIG tasks, and support ATO audits and continuous monitoring, remediation, and documentation

Qualifications

• Bachelor’s degree in a related field or equivalent experience.
• 5 years of system hardening experience or 10 years with HS diploma/GED.
• Experience with STIGs, ACAS vulnerability assessments, and patch remediation on Linux/Windows.
• Hands-on RHEL 8/9; RHEL 10 experience required or ongoing transition support.
• Experience maintaining Assess Only authorization and A&A documentation.

Responsibilities

• Perform system hardening aligned to DoD/Navy requirements.
• Conduct DoD-mandated vulnerability assessments using ACAS.
• Run SCAP scans and STIG compliance checks.
• Implement DISA STIG requirements and review quarterly STIG releases.
• Support ATO audits, Annual Security Reviews, and continuous monitoring.

Skills

System hardening

Vulnerability management

DoD cybersecurity

SCAP scanning

ACAS

RHEL administration

STIG remediation

Security clearance

Education

Bachelor’s degree in related field

High school diploma/GED + 10 years experience

Tools

ACAS

SCAP

DISA STIG

POA&M

RHEL 8/9/10

IOS

Windows

Job description

DirectViz Solutions (DVS) is seeking a Cybersecurity Engineer II to support Department of the Navy cybersecurity compliance and authorization activities in a hands-on environment. The role focuses on system hardening, vulnerability management, continuous monitoring support, and maintaining the documentation and assessment artifacts needed for accurate authorization posture.

Based in Virginia Beach, VA at VA Beach/Dam Neck (on-site), this position supports DoD-mandated scanning and STIG compliance checks, with direct involvement in remediation for Navy systems. Candidates should be prepared to work with Red Hat Enterprise Linux and operational compliance workflows from assessment through remediation and closure.

Key Responsibilities

• Perform system hardening aligned to applicable DoD and Navy cybersecurity requirements.
• Conduct DoD-mandated vulnerability assessments using ACAS.
• Run SCAP scans and execute automated STIG compliance checks.
• Implement and assess applicable DISA STIG requirements.
• Review quarterly STIG releases and evaluate system and operational impacts.
• Support ATO audits, Annual Security Reviews, and continuous monitoring activities.
• Analyze findings from ACAS, SCAP, and STIG activities and develop or update POA&M entries.
• Track cybersecurity vulnerabilities and associated remediation activities through closure.
• Remediate vulnerability findings, including application of vendor patches on Linux and Windows systems.
• Apply Security Management policy guidance and directives to cybersecurity activities.
• Support day-to-day cybersecurity operations and maintenance of network, server, and hardware resources.
• Administer, secure, patch, and troubleshoot Red Hat Enterprise Linux (RHEL) 8, 9, and 10 systems in accordance with approved configuration baselines and cybersecurity requirements.
• Maintain Assess Only authorization and accreditation packages, including evidence, assessment artifacts, control documentation, findings, and package updates required to sustain authorization posture.
• Plan, coordinate, implement, and verify infrastructure patching and network device IOS upgrades, assessing operational impact, documenting changes, and validating remediation.
• Apply, assess, document, and remediate applicable DISA STIG requirements across network systems, network devices, servers, and endpoint configurations.
• Coordinate with technical and cybersecurity stakeholders to address compliance findings and maintain system security posture.

Required Qualifications

• Bachelor’s degree in one of the listed disciplines, or an equivalent field.
• 5 years of full-time professional experience performing system hardening.
• Or High school diploma/GED plus 10 years of experience.
• Demonstrated experience implementing STIGs, performing ACAS vulnerability assessments, applying Security Management policy guidance/directives, and remediating vulnerabilities including vendor patches on Linux and Windows systems.
• Hands-on experience administering, hardening, patching, and troubleshooting RHEL 8 and 9; RHEL 10 experience is required or the candidate must be current enough to support transition and sustainment activities.
• Experience maintaining Assess Only authorization and accreditation packages and supporting cybersecurity assessment and authorization documentation through the package lifecycle.
• Working knowledge of infrastructure patch management and network device IOS management, including planning, implementation, validation, rollback considerations, and documentation.
• Experience applying and assessing DISA STIGs on network systems and devices, plus server and endpoint configurations, with documentation or remediation of resulting findings.
• Certifications: IAT Level II (one of the following): CCNA Security, CySA+, GICSP, GSEC, Security+CE, CND, or SSCP.
• SECRET clearance is required.

Technologies

• ACAS, SCAP, DISA STIG, POA&M
• Red Hat Enterprise Linux (RHEL) 8, Red Hat Enterprise Linux (RHEL) 9, Red Hat Enterprise Linux (RHEL) 10
• IOS, Linux, Windows

Compensation and Benefits

• Salary: USD 95,000 - 115,000 per year
• Comprehensive medical benefits
• 401(k) match
• Generous PTO accrual
• Professional development reimbursement
• Corporate-funded technology certifications
• Robust employee recognition and appreciation programs
• Competitive compensation

Physical and Mental Qualifications

• Maintain focus and awareness throughout scheduled working hours.
• Perform tasks requiring prolonged periods of sitting or standing at a desk using a computer, mouse, and keyboard.
• Lift and move objects weighing up to 15 pounds as needed.
• Exhibit excellent verbal and written communication skills with a strong command of the English language.
• Work independently while collaborating effectively as part of a team.
• Quickly learn and retain routine tasks and processes.
• Demonstrate strong organizational skills, attention to detail, business correspondence proficiency, and self-management capabilities.
• Perform essential functions satisfactorily; reasonable accommodation will be provided upon request.
• Accept and adapt to additional responsibilities or changes to assigned duties as determined by DirectViz Solutions (DVS).