Network Security Engineer II — Secret Clearance

Sigma Defense Systems; San Diego (CA); On-site; USD 95,000 - 136,000; Full time

Benefits offered by this job

Dental and Vision Insurance

Medical Insurance with HSA, FSA, andDF

Life and AD&D coverage

Employee Assistance Program (EAP)

401(k) with company match

160 hours PTO

12 holidays

Educational Assistance

Highly competitive salary

Job summary

Sigma Defense Systems in San Diego, CA is seeking a Network Security Engineer II to join our cybersecurity team. The role focuses on implementing DoD policies, hardening CANES environments, and ensuring secure network operations in a high-assurance setting. The successful candidate will manage RMF/NIST-based controls, conduct vulnerability remediation, and collaborate across engineering teams to maintain system integrity.

A U.S. citizenship and a Bachelor's degree are required.

Qualifications

• 3-10 years of experience.
• Must be a U.S. citizen.
• Bachelor's degree from an accredited college or university.

Responsibilities

• Implement and enforce DoD cybersecurity policies (STIGs, RMF, NIST SP 800-53) across CANES systems.
• Design, implement and troubleshoot solutions for CANES system vulnerabilities.
• Lead hardening of Windows/Linux systems, applications, network devices, and CANES hardware.
• Assist with IAVM compliance, log analysis, and audit readiness.
• Perform patch management, system scanning, and incident response coordination.
• Maintain system documentation and cybersecurity artifacts, and baseline reports.
• Support system validation during tests, site assessments, and production installations.
• Design, develop, and automate configurations for RHEL, Windows, SIEM/SOAR (Sentinel/Splunk), ACAS, and Trellix ESS.
• Submit configuration updates via GitLab/GitHub, Spork/Spork+.

Skills

Experience

Education

Bachelor's degree

Tools

ACAS

Trellix ESS

Spork/Spork+

NetIQ SIEM Sentinel

Job description

Sigma Defense Systems in San Diego, CA is seeking a Network Security Engineer II to join our cybersecurity team. The role focuses on implementing DoD policies, hardening CANES environments, and ensuring secure network operations in a high-assurance setting. The successful candidate will manage RMF/NIST-based controls, conduct vulnerability remediation, and collaborate across engineering teams to maintain system integrity.

A U.S. citizenship and a Bachelor's degree are required.