Network Security Engineer III | DoD RMF & CANES Expert

Sigma-Defense; San Diego (CA); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Dental and Vision Insurance

Medical Insurance (HSA, FSA, DFSA)

Life and AD&D coverage

EAP

401(k) Plan with Company Matching

Paid Time Off (PTO) 160 hours

12 Holidays

Educational Assistance

Highly Competitive Salary

Job summary

Sigma Defense is hiring a Network Security Engineer III to join our team in San Diego, CA. You will enforce DoD cybersecurity policies across CANES environments and drive hands-on hardening, vulnerability management, and automation using GitLab/GitHub and Spork/Spork+.

The role requires 5–10 years of experience, US citizenship, and the ability to obtain/maintain an active Secret clearance or higher. Certifications such as Security+ CE or CISSP are preferred.

Qualifications

• Bachelor's degree from an accredited college or university.
• 5-10 years of experience in network security or DoD environments.
• Must be a U.S. citizen; ability to obtain/maintain active Secret clearance or higher.

Responsibilities

• Implement and enforce DoD cybersecurity policies (STIGs, RMF, NIST SP 800-53) across CANES systems.
• Design, develop, implement and troubleshoot vulnerability remediation and mitigations.
• Lead hardening of Windows/Linux systems, applications, and network devices within CANES.
• Coordinate patch management, vulnerability scanning, and incident response activities.
• Maintain security documentation, artifacts, and baseline reports.

Education

Bachelor's degree

Tools

ACAS

Trellix ESS

Spork/Spork+

NetIQ Sentinel

Splunk

ArcSight/Sentinel

Job description

Sigma Defense is hiring a Network Security Engineer III to join our team in San Diego, CA. You will enforce DoD cybersecurity policies across CANES environments and drive hands-on hardening, vulnerability management, and automation using GitLab/GitHub and Spork/Spork+.

The role requires 5–10 years of experience, US citizenship, and the ability to obtain/maintain an active Secret clearance or higher. Certifications such as Security+ CE or CISSP are preferred.