Cybersecurity Engineering & Compliance Lead

Cyber StrategiX; Reston (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Applied Research Laboratory at Penn State in Reston, VA, is seeking an experienced Cybersecurity Engineering Manager to lead a team responsible for secure IT and cybersecurity in classified environments. This on-site role includes periodic travel to remote locations.

You will mentor staff, manage security plans, risk assessments, and ensure compliance with RMF, NIST/ISO 800-53, and DoD directives. Strong leadership and policy development are required.

Qualifications

• Experience with RMF assessment and authorization of systems and networks.
• Strong knowledge of NIST/ISO standards and DoD directives.
• Technical background in Windows and Linux environments.
• Leadership experience in IT security and policy development.
• Ability to obtain and maintain Security+ or CISSP certification.
• Eligibility for TS/SCI with CI polygraph.

Responsibilities

• Lead and mentor IT security professionals, including hiring and performance management.
• Develop and maintain RMF security plans and authorization packages.
• Oversee secure design, configuration, and system support with proper controls.
• Oversee risk assessments across the system lifecycle.
• Monitor networks and systems for compliance with cybersecurity policies.
• Create training material to support audits and security expectations.
• Lead vulnerability scanning, log review, and incident response.
• Collaborate with ARL leadership to integrate cybersecurity requirements.

Skills

RMF assessment

NIST/ISO 800-53

DoD directives & DISA STIG

Windows & Linux

Security policy development

Team leadership

Security+ or CISSP

Communication & collaboration

TS/SCI with CI polygraph

Education

Bachelor's degree in Information Security/IT/CS

Tools

Nessus

SCAP Compliance Checker

Splunk

VMware

Job description

Applied Research Laboratory at Penn State in Reston, VA, is seeking an experienced Cybersecurity Engineering Manager to lead a team responsible for secure IT and cybersecurity in classified environments. This on-site role includes periodic travel to remote locations.

You will mentor staff, manage security plans, risk assessments, and ensure compliance with RMF, NIST/ISO 800-53, and DoD directives. Strong leadership and policy development are required.