Cybersecurity Engineer: Vulnerability & Risk Lead

electro soft; Fort Belvoir (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Electrosoft Services, LLC is seeking a Cybersecurity Engineer to lead vulnerability management for enterprise web applications and infrastructure, ensuring compliance with DoD cybersecurity requirements. The role focuses on planning, executing, and supporting vulnerability assessments while coordinating with system owners, developers, and network teams.

Responsibilities include conducting scans, performing security tests, prioritizing remediation, and developing security controls and reports to

Qualifications

• Ten years of IT experience with security focus.
• DoD 8570/8140 IAT level III and IASAE III certifications required within 6 months of start.
• Experience coordinating with ISSOs/ISSMs and auditors preferred.

Responsibilities

• Conduct authenticated and unauthenticated vulnerability scans of apps, APIs, servers, databases, OS, and network devices.
• Perform web app security assessments using automated and manual techniques.
• Validate vulnerabilities to minimize false positives.
• Analyze CVEs and CWEs and associated risks.
• Prioritize vulnerabilities using CVSS and mission impact.

Skills

Vulnerability scanning

Web app security testing

Risk assessment

Tools

DISA STIGs

RMF

Job description

Electrosoft Services, LLC is seeking a Cybersecurity Engineer to lead vulnerability management for enterprise web applications and infrastructure, ensuring compliance with DoD cybersecurity requirements. The role focuses on planning, executing, and supporting vulnerability assessments while coordinating with system owners, developers, and network teams.

Responsibilities include conducting scans, performing security tests, prioritizing remediation, and developing security controls and reports to