Cybersecurity Engineer III (InSITE) - Secret Clearance

Vectrus, Inc; Orlando (FL); On-site; USD 120,000 - 130,000; Full time

Benefits offered by this job

Healthcare coverage

Retirement plan

Paid time off

Learning and Development resources

Job summary

V2X is seeking an experienced Cybersecurity Engineer III to lead the security posture for the InSITE solution within the WTRS program. You will drive RMF/ATO, conduct SAST/DAST, vulnerability assessments, and continuous monitoring across Dev, Test, and Production environments.

Responsibilities include leading security testing, STIG/SRG compliance, and mentoring junior engineers, while partnering with program management, engineering, and customers to deliver secure, reliable systems.

Qualifications

• Experience with SAST/DAST and vulnerability scans.
• RMF/ATO efforts and continuous monitoring.
• Knowledge of DISA STIG/SRG and DoD security controls.

Responsibilities

• Serve as primary cybersecurity lead for the InSITE/WTRS program.
• Drive cybersecurity planning, schedules, and resourcing.
• Define security assessment strategy aligned with RMF/ATO requirements.
• Lead application security testing and vulnerability remediation.
• Oversee STIG/SRG assessments and system hardening.
• Own RMF/ATO and continuous monitoring for InSITE.
• Mentor Cybersecurity Engineers I and II; present findings to leadership.

Skills

Application security

Vulnerability management

RMF/ATO

Leadership

Communication

Education

Bachelor's degree in Cybersecurity

Tools

Tenable/Nessus

Qualys

SonarQube

Fortify

Burp Suite

OWASP ZAP

Job description

Overview

Working across the globe, V2X builds smart solutions designed to integrate physical and digital infrastructure from base to battlefield. We bring 120 years of successful mission support to improve security, streamline logistics, and enhance readiness. Aligned around a shared purpose, our $3.9B company and 16,000 people work alongside our clients, here and abroad, to tackle their most complex challenges with integrity, respect, responsibility, and professionalism.

V2X is seeking an experienced Cybersecurity Engineer to serve as the senior/lead cybersecurity engineer for the InSITE application within the WTRS program. This role provides technical leadership for cybersecurity activities, including program planning, static and dynamic application security testing, penetration testing, monthly vulnerability assessments, quarterly STIG reviews, and RMF/ATO and continuous monitoring. The Cybersecurity Engineer III is responsible for driving the overall security posture of the InSITE solution across Dev, Test, and Production environments.

Responsibilities

Essential Duties & Responsibilities

• Serve as the primary cybersecurity lead for the InSITE/WTRS program and main point of contact for program management, engineering, and customer stakeholders.
• Drive cybersecurity planning, schedules, and resource estimates; represent cybersecurity in design reviews, TIMs, and Agile events.
• Define and manage the integrated security assessment strategy (SAST, DAST, penetration testing, vulnerability assessments, STIG/SRG compliance) aligned with RMF and ATO requirements.
• Lead application security testing:
• Oversee static code analysis and web application vulnerability scanning.
• Interpret findings, assess risk, and guide remediation.
• Lead vulnerability management and continuous monitoring across Dev/Test/Prod:
• Direct monthly scanning and analysis of servers and infrastructure.
• Prioritize vulnerabilities, coordinate remediation, and refine monitoring, metrics, and reporting.
• Lead quarterly STIG/SRG assessments and system hardening for Windows Server, IIS, .NET, Azure SQL, and related technologies:
• Maintain accurate STIG documentation and drive remediation and risk acceptance.
• Plan and lead penetration tests:
• Develop test plans and rules of engagement.
• Coordinate execution and produce/review reports with clear risk and mitigation guidance.
• Own RMF/ATO and continuous monitoring for InSITE:
• Lead Security Authorization Package development and submission.
• Oversee control implementation, assessment, POA&M management, and ongoing risk activities.
• Ensure scans, log reviews, and configuration checks are executed and documented.
• Mentor Cybersecurity Engineers I and II; promote secure design, coding, and operations.
• Produce and review formal security deliverables (vulnerability and pen test reports, ATO documentation, STIG packages) and present findings to leadership and customers.
• Identify and drive process and tool improvements, including automation and CI/CD integration.
• Perform other duties as assigned.

Qualifications

Education & Experience:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field; or equivalent experience.
• 6+ years of progressive experience in cybersecurity or system security engineering.

Proven experience leading:

• Application security assessments (SAST/DAST, vulnerability scans) for complex systems.
• DISA STIG/SRG-based hardening for servers, applications, and databases.
• RMF/ATO efforts and continuous monitoring for government/regulated systems.
• Penetration testing (hands-on or through oversight of specialized teams).

Knowledge, Skills & Abilities:

• Expert knowledge of application security, OWASP Top 10, and secure SDLC practices.
• Strong experience with vulnerability management across Dev/Test/Prod and with Windows Server, IIS, SQL/Azure SQL, and cloud-hosted environments.
• Hands-on experience with:
  Enterprise vulnerability tools (e.g., Tenable/Nessus, Qualys).
  Application security tools (e.g., SonarQube, Fortify, Veracode, Burp Suite, OWASP ZAP).
  DISA STIGs, DoD SRGs, and their implementation in production environments.
  Solid understanding of NIST SP 800-53, NIST RMF, and ATO/continuous monitoring requirements; Azure cloud security preferred.

Demonstrated leadership:

• Leading cross-functional security initiatives and remediation.
• Mentoring junior and mid-level engineers.
• Collaborating effectively with managers, customers, and stakeholders.
• Excellent written and verbal communication skills for technical reporting and presenting complex security issues to varied audiences.
• Strong analytical and decision-making skills, balancing mission needs, risk, and compliance.

Certificates, Licenses & Registrations:

• DoD 8570/8140 compliant certification at IAT III or IASAE level (e.g., CISSP, CASP+, CSSLP, or similar) strongly preferred
• Offensive or advanced security certifications (e.g., OSCP, OSWE, GPEN, GCIH) highly desirable.

Security Clearance:

• Ability to obtain and maintain a [Secret / Top Secret / as required] security clearance for the WTRS program.
• U.S Citizenship

What We Bring

• At V2X we strive to be market competitive in our total reward offerings.
• The successful candidate’s starting pay will be based on, but not limited to, their job-related skills, experience, qualifications, work location, and market conditions.
• Please speak with a recruiter for additional information.
• Employee benefits include the following:
  • Healthcare coverage
  • Life insurance, AD&D, and disability benefits
  • Retirement plan
  • Wellness programs
  • Paid time off, including holidays
  • Learning and Development resources
  • Employee assistance resources
  • The following salary range is intended to display the value of the company's base pay compensation and may be modified at the discretion of the company. USD $120,000.00 – $130,000.00

At V2X, we are deeply committed to both equal employment opportunity, including protection for Veterans and individuals with disabilities, and fostering an inclusive and diverse workplace. We ensure all individuals are treated with fairness, respect, and dignity, recognizing the strength that comes from a workforce rich in diverse experiences, perspectives, and skills. This commitment, aligned with our core Vision and Values of Integrity, Respect, and Responsibility, allows us to leverage differences, encourage innovation, and expand our success in the global marketplace, ultimately enabling us to best serve our clients. #Clearance #LI-KA