Cybersecurity Engineer II (InSITE) - Secret Clearance

V2X, Inc.; Orlando (FL); Sur place; USD 120 000 - 130 000; Plein temps

Avantages offerts par ce poste

Healthcare coverage

Retirement plan

Paid time off

Learning and Development resources

Résumé du poste

V2X, Inc. is seeking a cybersecurity professional to provide programmatic support for InSITE, lead vulnerability management, and coordinate remediation across Dev/Test/Prod environments.

You will conduct static and dynamic scans, prepare actionable reports, and support RMF/ATO efforts for government-related systems. The role requires experience with DISA STIG/SRG, NIST standards, and cloud security best practices in Azure, with collaboration across cross-functional teams to mitigate risk and

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field; or an equivalent combination of education and experience.
• Typically 3-6 years of cybersecurity, system security engineering, or closely related experience.

Responsabilités

• Provide cyber programmatic support for InSITE and participate in program planning and estimation.
• Represent cybersecurity at TIMs and Agile ceremonies, plan and execute static application security scans per sprint.
• Lead static code analysis activities and plan remediation approaches with timelines.
• Conduct web application vulnerability scanning for each release using approved DAST tools and report findings.
• Perform monthly vulnerability assessments across Dev/Test/Prod environments (~20 servers).
• Coordinate cyber remediation activities with system owners and track progress.
• Update security documentation, dashboards, and continuous monitoring records.
• Support penetration testing and ATO / RMF activities and contribute to reports.

Connaissances

Application security

Vulnerability management

RMF/ATO

DISA STIG/SRG

NIST SP 800-53

Azure cloud security

Windows Server

IIS

SQL/Azure SQL

Formation

Bachelor's degree in Cybersecurity

Equivalent education/experience

Outils

Tenable/Nessus

Qualys

Rapid7

SonarQube

Fortify

Veracode

Burp Suite

OWASP ZAP

Description du poste

Overview

Working across the globe, V2X builds smart solutions designed to integrate physical and digital infrastructure from base to battlefield. We bring 120 years of successful mission support to improve security, streamline logistics, and enhance readiness. Aligned around a shared purpose, our $3.9B company and 16,000 people work alongside our clients, here and abroad, to tackle their most complex challenges with integrity, respect, responsibility, and professionalism.

Responsibilities

• Provide cyber programmatic support for InSITE:
• Support program planning and estimation for cybersecurity tasks.
• Represent cybersecurity at TIMs and Agile ceremonies (planning, reviews, retrospectives).
• Troubleshoot and resolve or elevate security-related issues across Dev/Test/Prod environments.
• Lead static code analysis activities:
• Plan and execute static application security scans (e.g., SonarQube or equivalent) per sprint.
• Analyze scan results, identify false positives, and prioritize vulnerabilities based on risk.
• Collaborate with development teams to define remediation approaches and timelines.
• Track remediation status and verify closure through re-scans.
• Conduct web application vulnerability scanning:
• Plan and execute web application security scans for each release using approved DAST tools.
• Interpret results and consolidate findings into actionable reports.
• Work with developers and system administrators to ensure remediation is scheduled and completed.
• Execute monthly vulnerability assessments:
• Prepare and configure scanning of virtual servers and infrastructure across Dev/Test/Prod (~20 servers).
• Run vulnerability scans and perform detailed analysis of findings.
• Correlate, deduplicate, and prioritize vulnerabilities; document risk and remediation recommendations.
• Coordinate cyber remediation activities with system owners and track progress.
• Update security documentation, dashboards, and continuous monitoring records.
• Perform quarterly STIG and SRG assessments:
• Conduct DISA STIG/SRG reviews for technologies including:
• ASD STIG; Cloud Computing Mission Owner Network and OS SRGs.
• Microsoft Windows Server, IIS (Server/Site), .NET Framework, Azure SQL.
• Endpoint security tools, browsers, and host firewalls.
• Document compliance status, deviations, mitigations, and residual risk.
• Maintain STIG checklists and ensure updates are reflected in system baselines.
• Support penetration testing and advanced assessments:
• Assist in scoping and planning penetration tests (including rules of engagement).
• Perform or support penetration testing under guidance of senior staff.
• Contribute to penetration test reports with technical details and recommended mitigations.
• Support ATO / RMF and continuous monitoring:
• Contribute to the development and maintenance of the Security Authorization Package.
• Provide control implementation evidence, participate in control assessments, and support POA&M management.
• Perform continuous monitoring tasks such as periodic scans, log review support, and compliance status updates.
• Prepare and maintain technical documentation and reports:
• Produce clear, concise vulnerability and scan reports for internal and external stakeholders.
• Update run books, procedures, and standard operating instructions for assessment activities.
• Provide guidance and mentorship to junior cybersecurity staff as needed.
• Perform other duties as assigned in support of W-TRS and GTS.

Qualifications

Education & Experience:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field; or an equivalent combination of education and experience.
• Typically 3-6 years of cybersecurity, system security engineering, or closely related experience.

Proven experience leading:

• Application security assessments (SAST/DAST, vulnerability scans) for complex systems.
• DISA STIG/SRG-based hardening for servers, applications, and databases.
• RMF/ATO efforts and continuous monitoring for government/regulated systems.
• Vulnerability scanning and management in multi-environment deployments.

Knowledge, Skills & Abilities:

• Expert knowledge of application security, OWASP Top 10, and secure SDLC practices.
• Strong experience with vulnerability management across Dev/Test/Prod and with Windows Server, IIS, SQL/Azure SQL, and cloud-hosted environments.
• Hands-on experience with:
  Enterprise vulnerability tools (e.g., Tenable/Nessus, Qualys, Rapid 7).
  Application security tools (e.g., SonarQube, Fortify, Veracode, Burp Suite, OWASP ZAP).
  DISA STIGs, DoD SRGs, and their implementation in production environments.
  Solid understanding of NIST SP 800-53, NIST RMF, and ATO/continuous monitoring requirements; Azure cloud security preferred.

Demonstrated leadership:

• Leading cross-functional security initiatives and remediation.
• Collaborating effectively with managers, customers, and stakeholders.
• Excellent written and verbal communication skills for technical reporting and presenting complex security issues to varied audiences.
• Strong analytical and decision-making skills, balancing mission needs, risk, and compliance.

CERTIFICATES, LICENSES & REGISTRATIONS:

DoD 8570/8140 compliant certification at IAT Level II or higher (e.g., Security+, CySA+, GSECor similar) strongly preferred

Offensive or advanced security certifications (e.g., OSCP, OSWE, GPEN, GCIH) desirable.

SECURITY CLEARANCE:

Ability to obtain and maintain a [Secret] security clearance for the WTRS program.

U.S Citizenship

What We Bring

• At V2X we strive to be market competitive in our total reward offerings.
• The successful candidate’s starting pay will be based on, but not limited to, their job-related skills, experience, qualifications, work location, and market conditions.
• Employee benefits include the following:
  • Healthcare coverage
  • Life insurance, AD&D, and disability benefits
  • Retirement plan
  • Wellness programs
  • Paid time off, including holidays
  • Learning and Development resources
  • Employee assistance resources
  • The following salary range is intended to display the value of the company's base pay compensation and may be modified at the discretion of the company. USD $120,000.00 – $130,000.00
  • Pay and benefits are subject to change at any time and may be modified at the discretion of the company, consistent with the terms of any applicable compensation or benefit plans.

At V2X, we are deeply committed to both equal employment opportunity, including protection for Veterans and individuals with disabilities, and fostering an inclusive and diverse workplace. We ensure all individuals are treated with fairness, respect, and dignity, recognizing the strength that comes from a workforce rich in diverse experiences, perspectives, and skills. This commitment, aligned with our core Vision and Values of Integrity, Respect, and Responsibility, allows us to leverage differences, encourage innovation, and expand our success in the global marketplace, ultimately enabling us to best serve our clients. #Clearance