Cybersecurity Engineer II

DirectViz Solutions, LLC; Virginia Beach (VA); On-site; USD 105,000 - 135,000; Full time

Benefits offered by this job

Medical benefits

401(k) match

PTO accrual

Professional development reimbursement

Certifications funded

Employee recognition programs

Job summary

DirectViz Solutions, LLC is seeking a Cybersecurity Engineer II to support Navy cybersecurity compliance, system hardening, vulnerability management, continuous monitoring, and ATO activities in an on-site role at VA Beach/Dam Neck. You will perform DoD-mandated scans, manage patches, and apply DISA STIG requirements across Linux, Windows, and network devices.

Qualifications include a BS in cybersecurity or related field (or equivalent 10-year path), 5 years of hardening experience, and IAT

Qualifications

• Bachelor’s degree in cybersecurity or related field plus relevant experience.
• 5 years of full-time professional experience in system hardening.
• High school diploma with 10 years of hands-on cybersecurity experience.
• Experience implementing STIGs, performing ACAS vulnerability assessments, and patches on Linux/ Windows systems.
• Hands-on administration of RHEL 8/9; RHEL 10 current or supported.
• Experience maintaining ATO packages and cybersecurity documentation throughout package lifecycle.
• Strong patch management and IOS management for network devices.
• Certifications: IAT Level II – CCNA Security, CySA+, GICSP, GSEC, Security+CE, CND, or SSCP.

Responsibilities

• Perform DoD/Navy security hardening per required baseline.
• Conduct ACAS vulnerability assessments and SCAP/STIG checks.
• Implement DISA STIG requirements and review quarterly STIGs.
• Support ATO audits, annual reviews, and continuous monitoring.
• Remediate findings and apply patches to Linux/Windows systems.
• Coordinate patching and IOS upgrades with stakeholders.
• Maintain evidence and artifacts for security packages.

Skills

System hardening

ACAS vulnerability assessments

SCAP & STIG compliance

RHEL administration

DISA STIGs

Vulnerability management

ATO support

Patch management

Security monitoring

Education

Bachelor’s degree in cybersecurity or related field

High school diploma + 10 years experience

Tools

ACAS

SCAP

RHEL

Job description

DirectViz Solutions (DVS) is a dynamic and rapidly growing government contractor committed to delivering innovative IT solutions that address the mission-critical needs of our government clients. Through the expertise and dedication of our talented team, we provide cutting-edge technology services designed to achieve success and exceed expectations.

At DVS, we prioritize our employees as our greatest asset. We offer competitive compensation, comprehensive medical benefits, a 401(k) match, generous PTO accrual, professional development reimbursement, corporate-funded technology certifications, and robust employee recognition and appreciation programs.

Title: Cybersecurity Engineer II

Location: VA Beach/Dam Neck (on-site)

Summary DVS is seeking a Cybersecurity Engineer II to support Department of the Navy cybersecurity compliance, system hardening, vulnerability management, continuous monitoring, and system authorization activities. The engineer performs DoD-mandated cybersecurity scans and compliance checks; supports Authorization to Operate (ATO), Assess Only authorization and accreditation package maintenance, and Annual Security Review activities; evaluates and applies DISA STIG requirements to network systems and endpoint configurations; manages infrastructure patching and network device IOS updates; and remediates vulnerabilities across mission-critical Navy radar, data-distribution, server, endpoint, and network environments. Hands-on experience with Red Hat Enterprise Linux (RHEL) 8, 9, and 10 is required.

Key Responsibilities

• Perform system hardening in accordance with applicable DoD and Navy cybersecurity requirements.
• Conduct DoD-mandated vulnerability assessments using ACAS.
• Conduct SCAP scans and automated STIG compliance checks.
• Implement and assess applicable DISA STIG requirements.
• Review quarterly STIG releases and assess system and operational impacts.
• Support ATO audits, Annual Security Reviews, and continuous monitoring activities.
• Analyze ACAS, SCAP, and STIG findings and develop or update POA&M entries.
• Track cybersecurity vulnerabilities and remediation activities through closure.
• Remediate vulnerability findings, including implementation of vendor patches on Linux and Windows operating systems.
• Apply Security Management policy guidance and directives to cybersecurity activities.
• Support day-to-day cybersecurity operations and maintenance of network, server, and hardware resources.
• Administer, secure, patch, and troubleshoot Red Hat Enterprise Linux (RHEL) 8, 9, and 10 systems in accordance with approved configuration baselines and cybersecurity requirements.
• Maintain Assess Only authorization and accreditation packages, including supporting evidence, assessment artifacts, control documentation, findings, and package updates required to sustain an accurate authorization posture.
• Plan, coordinate, implement, and verify infrastructure patching and network device IOS upgrades while assessing operational impact, documenting changes, and validating remediation.
• Apply, assess, document, and remediate applicable DISA STIG requirements across network systems, network devices, servers, and endpoint configurations.
• Coordinate with technical and cybersecurity stakeholders to address compliance findings and maintain system security posture.

Minimum Qualifications

• Bachelor’s degree in Cybersecurity, Cyber Operations, Cyber Engineering, Information Systems, Information Technology, Computer/Electrical/Electronics Engineering, Software Engineering, Computer Science, Mathematics with a concentration in Computer Science, or an equivalent discipline.
• 5 years of full-time professional experience performing system hardening.
• Or High school diploma/GED plus ten years of experience
• Demonstrated experience implementing STIGs, performing ACAS vulnerability assessments, applying Security Management policy guidance/directives, and remediating vulnerabilities and implementing vendor patches on Linux and Windows systems.
• Demonstrated hands-on experience administering, hardening, patching, and troubleshooting Red Hat Enterprise Linux (RHEL) 8 and 9; experience with RHEL 10 is required or must be current enough to support transition and sustainment activities.
• Experience maintaining Assess Only authorization and accreditation packages and supporting cybersecurity assessment and authorization documentation throughout the package lifecycle.
• Working knowledge of infrastructure patch management and network device IOS management, including planning, implementation, validation, rollback considerations, and documentation.
• Experience applying and assessing DISA STIGs on network systems and devices, as well as server and endpoint configurations, and documenting or remediating resulting findings.
• Certifications: IAT Level II – (one of the following) CCNA Security, CySA+, GICSP, GSEC, Security+CE, CND, or SSCP

Physical and Mental Qualifications:

• Maintain focus and awareness throughout scheduled working hours.
• Perform tasks requiring prolonged periods of sitting or standing at a desk, utilizing a computer, mouse, and keyboard.
• Lift and move objects weighing up to 15 pounds as needed.
• Exhibit excellent verbal and written communication skills, with a strong command of the English language.
• Demonstrate the ability to work independently while also collaborating effectively as part of a team.
• Quickly learn and retain routine tasks and processes.
• Possess strong organizational skills, attention to detail, business correspondence proficiency, and self-management capabilities.
• Perform the essential functions of the role satisfactorily; reasonable accommodation will be provided for employees with disabilities upon request.
• Accept and adapt to additional responsibilities or changes to assigned duties as determined by DirectViz Solutions (DVS).

DirectViz Solutions, LLC (DVS) is an equal opportunity employer who prohibits discrimination and harassment against any employee or applicant for employment based on race, , sex (including pregnancy), age, gender identity, creed, religion, national origin, sexual orientation, marital status, genetic information, disability, political affiliation, protected veteran status, or any other status protected by federal, state or local law.

DVS has a zero-tolerance policy for harassment, threats, coercion, discrimination, and intimidation. Employees may file a complaint or exercise any right protected by Executive Order 11246, Section 503 of the Rehabilitation Act of 1973, as amended, Section 4212 of the Vietnam Era Veterans Readjustment Assistance Act of 1974, or the Veterans Employment Opportunities Act of 1998.