Junior Cyber Security Engineer

Cybersecurity Jobs; Bethesda (MD); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical premiums

Dental premiums

Vision premiums

Disability insurance

Life insurance

401(k) with company match

PTO

Floating holidays

Flexible work schedules

Referral bonuses

Job summary

Cybersecurity Jobs in Bethesda, MD, is seeking a security engineer to design, build, and integrate DoD-focused security into on‑prem systems across the full lifecycle.

Responsibilities include secure architecture design, RMF/STS integration, and development of SSPs and risk assessments. Familiarity with RMF+, ATO, and DoD guidance is essential for this onsite role.

Qualifications

• Active TS/SCI clearance required; CI Polygraph preferred.
• Bachelor's degree or equivalent plus three years in the field.
• DoD 8570.01-M IASAE Level II certification (CISSP/CISSP-ISSAP/CISSP-ISSEP/CSSLP/CASP+ CE) or equivalent.
• Developer scripting experience; vulnerability review and remediation planning.
• Experience with RMF integration into SDLC and security controls.

Responsibilities

• Support secure architecture and DoD system implementation per DoDI 8510.01 and NIST SP 800-53.
• Integrate RMF activities into SDLC; select, implement, and validate controls.
• Develop SSPs, SARs, risk assessments, and POA&Ms.
• Apply STIGs; use SCAP, STIG Viewer, and ACAS for compliance validation.
• Maintain vulnerability scanning infra and guide mitigation decisions.
• Support authorization, incident response, forensics, and security automation.

Skills

Scripting experience

Security Architecture

Vulnerability assessment

DoD guidance knowledge

Risk assessment

Education

Bachelor's degree

Tools

SCAP

STIG Viewer

ACAS

OWASP

Fortify

SonarQube

Tenable

XACTA

eMASS

RMF+

Job description

Support DOMEX Technology Platform task orders for NMEC by designing, building, and integrating security into on-premises systems across the full lifecycle.

Responsibilities

• Support secure architecture, design, and implementation of DoD systems in alignment with DoDI 8510.01, NIST SP 800-53, and other DoD security guidance
• Drive integration of RMF activities into the SDLC, including selection, implementation, and validation of security controls
• Develop and maintain SSPs, SARs, risk assessments, and POA&Ms
• Apply STIGs and validate compliance using SCAP, STIG Viewer, and ACAS
• Maintain vulnerability scanning infrastructure and assess findings to support mitigation or risk acceptance decisions
• Support activities across system authorization, incident response, forensics analysis, and security automation efforts

Requirements

• Active TS/SCI clearance with ability to obtain a CI Polygraph
• Bachelor's degree with minimum 3 years of experience in the category field
• Two additional years of experience may be substituted for the bachelor's degree
• At least one DoD 8570.01-M IASAE Level II certification: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE
• Developer experience preferred in at least one scripting or programming language
• Experience reviewing cybersecurity vulnerabilities to determine risk and relevance, and building mitigation or remediation plans for systems, network, application, and database vulnerabilities
• Ability to architect, design, troubleshoot, maintain, and deploy vulnerability scanning solutions such as OWASP, Fortify, SonarQube, and Tenable
• Experience with XACTA, eMASS, or similar tools
• Strong understanding of Microsoft Windows and Linux/UNIX operating systems
• Experience with middleware/web technologies, databases, TCP/IP networking, and CI/CD platforms
• Familiarity with NIST 800-171, NIST 800-172, NIST SSDF, CMMC, and CNSSI 1253
• Experience supporting DoD/IC systems through the RMF+ process

Preferred Qualifications

• Software development experience with Python, Java, or React
• Experience achieving ATO under RMF+
• Experience with big data applications
• Experience with GitLab, Jira, and Confluence
• Experience in Agile environments
• Experience with OIDC or OAuth2
• Experience with Kubernetes, Rancher, Strimzi, Cloudera, Active Directory, and scripting languages such as Bash, Python, or PowerShell

Technologies

• DoDI 8510.01, NIST SP 800-53, RMF, SDLC
• STIGs, SCAP, STIG Viewer, ACAS
• OWASP, Fortify, SonarQube, Tenable
• XACTA, eMASS
• Microsoft Windows, Linux/UNIX
• TCP/IP, CI/CD
• NIST 800-171, NIST 800-172, NIST SSDF, CMMC, CNSSI 1253
• RMF+
• Python, Java, React, GitLab, Jira, Confluence
• OIDC, OAuth2, Kubernetes, Rancher, Strimzi, Cloudera
• Active Directory, Bash, PowerShell

Benefits

• 100% company-paid medical premiums for employees and eligible dependents (CareFirst, Kaiser, UnitedHealthcare; PPO, POS, HMO, HSA-compatible options)
• 100% company-paid dental premiums for employees and eligible dependents
• 100% company-paid vision premiums for employees and eligible dependents
• 100% company-paid premiums for short-term disability
• 100% company-paid premiums for long-term disability
• 100% company-paid premiums for accidental death & dismemberment (AD&D)
• 100% company-paid premiums for life insurance up to $200,000
• 401(k) with immediate vesting: 4% company match plus 4% non-elective company contribution (8% total)
• 401(k) pre-tax and Roth options
• Up to 20 days of flexible paid time off (PTO)
• 11 paid floating holidays
• Flexible work schedules: flex time and compressed work periods (contract and project-dependent)
• Employee referral bonuses up to $10,000 per hired referral
• Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent)
• Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity)

Location: Bethesda, MD, United States (onsite)

Minimum experience: 3 years

Education: Bachelor's degree

Security clearance: Active TS/SCI with ability to obtain a CI Polygraph

Education and experience equivalency: High School Diploma/GED with 5 years; Associate’s Degree with 5 years; Bachelor’s Degree with 3 years; Master’s Degree with 3 years; PhD with 3 years