Cybersecurity Engineer III (InSITE) - Secret Clearance

V2X Inc; Orlando (FL); On-site; USD 120,000 - 130,000; Full time

Benefits offered by this job

Healthcare coverage

Life insurance

AD&D

Disability benefits

Retirement plan

Wellness programs

Paid time off

Learning and Development resources

Employee assistance resources

Job summary

V2X Inc in Orlando seeks a senior Cybersecurity Engineer to lead the InSITE security program within WTRS. You will drive SAST/DAST, penetration testing, monthly vulnerability assessments, STIG reviews, RMF/ATO, and continuous monitoring across Dev, Test, and Production.

This role requires 6+ years of experience, DoD-style compliance knowledge, and strong leadership to mentor junior engineers and present risk findings to stakeholders.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field, or equivalent experience.
• 6+ years of progressive experience in cybersecurity or system security engineering.
• Experience with application security assessments (SAST/DAST, vulnerability scans).
• Knowledge of RMF/ATO processes and DoD security requirements.

Responsibilities

• Serve as the primary cybersecurity lead for the InSITE/WTRS program and main point of contact for management, engineering, and customer stakeholders.
• Drive cybersecurity planning, schedules, and resource estimates; represent cybersecurity in design reviews and Agile events.
• Define and manage the integrated security assessment strategy (SAST, DAST, vulnerability assessments, STIG/SRG) aligned with RMF and ATO requirements.
• Lead vulnerability management and continuous monitoring across Dev/Test/Prod; prioritize remediation and improve metrics.
• Own RMF/ATO documentation and continuous monitoring efforts; ensure scans, log reviews, and config checks are executed.

Skills

Application security

Vulnerability management

SAST/DAST

Penetration testing

Cloud security

RMF/ATO

Team leadership

Security monitoring

Education

Bachelor’s degree or equivalent

Tools

Tenable/Nessus

Qualys

SonarQube

Fortify

Veracode

Burp Suite

OWASP ZAP

Job description

Overview

Working across the globe, V2X builds smart solutions designed to integrate physical and digital infrastructure from base to battlefield. We bring 120 years of successful mission support to improve security, streamline logistics, and enhance readiness. Aligned around a shared purpose, our $3.9B company and 16,000 people work alongside our clients, here and abroad, to tackle their most complex challenges with integrity, respect, responsibility, and professionalism.

V2X is seeking an experienced Cybersecurity Engineer to serve as the senior/lead cybersecurity engineer for the InSITE application within the WTRS program. This role provides technical leadership for cybersecurity activities, including program planning, static and dynamic application security testing, penetration testing, monthly vulnerability assessments, quarterly STIG reviews, and RMF/ATO and continuous monitoring. The Cybersecurity Engineer III is responsible for driving the overall security posture of the InSITE solution across Dev, Test, and Production environments.

Responsibilities

• Serve as the primary cybersecurity lead for the InSITE/WTRS program and main point of contact for program management, engineering, and customer stakeholders.
• Drive cybersecurity planning, schedules, and resource estimates; represent cybersecurity in design reviews, TIMs, and Agile events.
• Define and manage the integrated security assessment strategy (SAST, DAST, penetration testing, vulnerability assessments, STIG/SRG compliance) aligned with RMF and ATO requirements.
• Lead application security testing:
• Oversee static code analysis and web application vulnerability scanning.
• Interpret findings, assess risk, and guide remediation.
• Lead vulnerability management and continuous monitoring across Dev/Test/Prod:
• Direct monthly scanning and analysis of servers and infrastructure.
• Prioritize vulnerabilities, coordinate remediation, and refine monitoring, metrics, and reporting.
• Lead quarterly STIG/SRG assessments and system hardening for Windows Server, IIS, .NET, Azure SQL, and related technologies:
• Maintain accurate STIG documentation and drive remediation and risk acceptance.
• Plan and lead penetration tests:
• Develop test plans and rules of engagement.
• Coordinate execution and produce/review reports with clear risk and mitigation guidance.
• Own RMF/ATO and continuous monitoring for InSITE:
• Lead Security Authorization Package development and submission.
• Oversee control implementation, assessment, POA&M management, and ongoing risk activities.
• Ensure scans, log reviews, and configuration checks are executed and documented.
• Mentor Cybersecurity Engineers I and II; promote secure design, coding, and operations.
• Produce and review formal security deliverables (vulnerability and pen test reports, ATO documentation, STIG packages) and present findings to leadership and customers.
• Identify and drive process and tool improvements, including automation and CI/CD integration.
• Perform other duties as assigned.

Qualifications

Education & Experience

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field; or equivalent experience.
• 6+ years of progressive experience in cybersecurity or system security engineering.

Proven Experience Leading

• Application security assessments (SAST/DAST, vulnerability scans) for complex systems.
• DISA STIG/SRG-based hardening for servers, applications, and databases.
• RMF/ATO efforts and continuous monitoring for government/regulated systems.
• Penetration testing (hands-on or through oversight of specialized teams).

Knowledge, Skills & Abilities

• Expert knowledge of application security, OWASP Top 10, and secure SDLC practices.
• Strong experience with vulnerability management across Dev/Test/Prod and with Windows Server, IIS, SQL/Azure SQL, and cloud-hosted environments.
• Hands‑on experience with: Enterprise vulnerability tools (e.g., Tenable/Nessus, Qualys). Application security tools (e.g., SonarQube, Fortify, Veracode, Burp Suite, OWASP ZAP). DISA STIGs, DoD SRGs, and their implementation in production environments. Solid understanding of NIST SP 800-53, NIST RMF, and ATO/continuous monitoring requirements; Azure cloud security preferred.

Demonstrated Leadership

• Leading cross-functional security initiatives and remediation.
• Mentoring junior and mid-level engineers.
• Collaborating effectively with managers, customers, and stakeholders.
• Excellent written and verbal communication skills for technical reporting and presenting complex security issues to varied audiences.
• Strong analytical and decision‑making skills, balancing mission needs, risk, and compliance.

Certificates, Licenses & Registrations

• DoD 8570/8140 compliant certification at IAT III or IASAE level (e.g., CISSP, CASP+, CSSLP, or similar) strongly preferred
• Offensive or advanced security certifications (e.g., OSCP, OSWE, GPEN, GCIH) highly desirable.

Security Clearance

• Ability to obtain and maintain a [Secret / Top Secret / as required] security clearance for the WTRS program.
• U.S Citizenship

What We Bring

At V2X we strive to be market competitive in our total reward offerings.

The successful candidate’s starting pay will be based on, but not limited to, their job‑related skills, experience, qualifications, work location, and market conditions.

Employee benefits include the following:

• Healthcare coverage
• Life insurance, AD&D, and disability benefits
• Retirement plan
• Wellness programs
• Paid time off, including holidays
• Learning and Development resources
• Employee assistance resources
• USD $120,000.00 – $130,000.00
• Pay and benefits are subject to change at any time and may be modified at the discretion of the company, consistent with the terms of any applicable compensation or benefit plans.

At V2X, we are deeply committed to both equal employment opportunity, including protection for Veterans and individuals with disabilities, and fostering an inclusive and diverse workplace. We ensure all individuals are treated with fairness, respect, and dignity, recognizing the strength that comes from a workforce rich in diverse experiences, perspectives, and skills. This commitment, aligned with our core Vision and Values of Integrity, Respect, and Responsibility, allows us to leverage differences, encourage innovation, and expand our success in the global marketplace, ultimately enabling us to best serve our clients. #Clearance