Cybersecurity Engineer: OT Security & RMF Expert

Paylocity; Ashburn, Northern (VA, KY); Hybrid; USD 120,000 - 190,000; Full time

Job summary

Sherpa 6 in Ashburn, VA is seeking a Cybersecurity Engineer to support CBP OTOC operations, delivering cybersecurity engineering, vulnerability management, incident response, RMF/ATO, and risk assessments for complex OT environments.

The role requires translating mission requirements into security controls, identifying vulnerabilities, and guiding engineering teams on risk-informed decisions throughout the system lifecycle.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Systems Engineering, or related field.
• Equivalent professional experience may substitute for degree.
• 5+ years in cybersecurity engineering, information security, or related field.
• Experience with RMF, ATO, and government cybersecurity standards.

Responsibilities

• Provide cybersecurity engineering support for integration, deployment, authorization, and sustainment of OT/mission systems.
• Translate requirements into actionable cybersecurity requirements and secure architectures.
• Identify cybersecurity risks, vulnerabilities, and attack surfaces across systems and networks.
• Collaborate to resolve cybersecurity issues while maintaining mission performance and availability.
• Support RMF activities, ATOs, and continuous monitoring across the lifecycle.

Skills

Cybersecurity engineering

Vulnerability management

Incident response

RMF

ATO processes

Threat assessment

Education

Bachelor's degree in Cybersecurity

Tools

SIEM

EDR/XDR

Job description

Sherpa 6 in Ashburn, VA is seeking a Cybersecurity Engineer to support CBP OTOC operations, delivering cybersecurity engineering, vulnerability management, incident response, RMF/ATO, and risk assessments for complex OT environments.

The role requires translating mission requirements into security controls, identifying vulnerabilities, and guiding engineering teams on risk-informed decisions throughout the system lifecycle.