Network Security Specialist

Data Systems Analysts, Inc.; Charlottesville (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

Data Systems Analysts, Inc. (DSA) seeks a TS/SCI cleared Network Security Specialist to secure, engineer, and defend enterprise DoD networks in Charlottesville, VA. You will perform hands-on hardening, vulnerability remediation, and boundary defense for Cisco-based infrastructure.

Onsite role requiring experience with ACAS, Nessus, STIGs, and DISA benchmarks, plus collaboration with engineers and mission partners to sustain security authorizations.

Qualifications

• Minimum 4 years of experience supporting network security engineering, secure network operations, boundary defense, or hands-on network administration.
• Working knowledge of Cisco routers, switches, firewalls, Cisco ASA, Cisco Firepower, Cisco Secure Firewall, Cisco ISE, Catalyst, Nexus, ISR, or ASR platforms.
• Experience with ACAS, Nessus, STIG Viewer, SCAP, and vulnerability remediation processes.
• Experience applying, validating, or remediating vulnerability findings and DISA STIGs for network devices.
• Experience developing or maintaining technical configuration standards, ports and protocols lists, network topology diagrams, and device configuration baselines.

Responsibilities

• Configure and review firewall rules, access control lists, ports, protocols, services, VPN connections, network flows, and boundary protection controls.
• Configure, validate, and audit security configurations for Cisco routers, switches, firewalls, and related network infrastructure.
• Support active network security operations, boundary defense engineering, and continuous hardening for enterprise network systems.
• Support incident response activities by analyzing network alerts, logs, firewall events, syslog data, and authentication events.
• Monitor network security posture through syslog alerts, configuration management tools, and packet-level analysis.
• Develop and maintain technical network security documentation including device hardening procedures, network diagrams, and PPS listings.

Skills

Network security engineering

Boundary defense

Vulnerability remediation

Technical documentation

DoD security concepts

Education

BS degree in Engineering or related field

Tools

ACAS

Tenable Nessus

STIG Viewer

SCAP

Splunk

Wireshark

OpenSearch

Job description

All hired employees are expected to have experience with Microsoft Copilot and / or an approved equivalent AI solution.

Description

Data Systems Analysts, Inc. (DSA) is seeking a TS/SCI cleared Network Security Specialist to secure, engineer, and defend enterprise network systems in a secure DoD environment. The Network Security Specialist will perform hands‑on security configuration, boundary defense engineering, vulnerability remediation, and device hardening for Cisco based network infrastructure.

This position is onsite in Charlottesville, VA.

Responsibilities

• Configure and review firewall rules, access control lists, ports, protocols, services, VPN connections, network flows, and boundary protection controls.
• Configure, validate, and audit security configurations for Cisco routers, switches, firewalls, and related network infrastructure.
• Support active network security operations, boundary defense engineering, and continuous hardening for enterprise network systems.
• Support incident response activities by performing technical analysis of network related alerts, logs, firewall events, syslog data, and authentication events.
• Support change control reviews by assessing proposed network changes for cybersecurity impacts, configuration vulnerabilities, and security architecture alignment.
• Monitor network security posture through syslog alerts, configuration management tools, and packet‑level analysis.
• Conduct, analyze, and remediate vulnerability scans using ACAS, Tenable Nessus, STIG Viewer, and other approved DoD tools.
• Analyze vulnerability findings, identify false positives, engineer technical workarounds, and execute remediation actions across network devices.
• Implement and validate DISA STIG compliance, SCAP benchmarks, security baselines, and device hardening requirements.
• Develop and maintain technical network security documentation including device hardening procedures, network diagrams, and Ports, Protocols, and Services (PPS) listings.
• Support technical engineering assessments and security reviews to maintain authorization sustainment activities.
• Prepare technical security status updates, vulnerability remediation roadmaps, and network security risk briefings for engineering teams and stakeholders.

Required Education, Certifications and Security Clearance

• BS degree in Engineering, Computer Science, or related field
  • Experience may be substituted for degree.
• TS/SCI Clearance
• CCNA certification

Requirements Experience/Qualifications

• Minimum 4 years of experience supporting network security engineering, secure network operations, boundary defense, or hands‑on network administration.
• Working knowledge of Cisco routers, switches, firewalls, Cisco ASA, Cisco Firepower, Cisco Secure Firewall, Cisco ISE, Catalyst, Nexus, ISR, or ASR platforms.
• Working knowledge of routing, switching, VLANs, ACLs, firewall policies, ports, protocols, VPNs, IPsec, NAT, DNS, DHCP, subnetting, logging, and boundary protection.
• Ability to design and review network diagrams, firewall rule sets, data flows, ports and protocols, and system interconnections for security vulnerabilities.
• Demonstrated understanding of network hardening practices, secure protocols, network security architecture, and boundary defense concepts.
• Experience coordinating with network engineers, systems administrators, security analysts, and mission partners to resolve technical security findings.
• Hands on experience with ACAS, Tenable Nessus, STIG Viewer, SCAP, and network vulnerability remediation processes.
• Experience applying, validating, or remediating vulnerability findings and DISA STIGs for network devices.
• Experience developing or maintaining technical configuration standards, ports and protocols lists, network topology diagrams, and device configuration baselines.
• Familiarity with applying and verifying security controls on network hardware to support technical authorization maintenance.
• Experience supporting network security activities within the DoD, Intelligence Community, or other secure enterprise environment.
• Knowledge of NIST SP 800‑53 security controls (specifically Network/Access Control families), DISA Network Infrastructure STIGs, and secure network design practices.
• Strong technical documentation, communication, analytical, and troubleshooting skills.

Preferred Experience/Qualifications

• Experience securing, assessing, and engineering Cisco ASA, Cisco Firepower, Cisco Secure Firewall, Cisco ISE, Catalyst, Nexus, ISR, or ASR platforms in a production environment.
• Experience writing and auditing firewall rules, access control policies, route tables, network diagrams, ports and protocols, and VPN configurations.
• Experience with Splunk, Elastic, ELK Stack, OpenSearch, SolarWinds, Wireshark, NetFlow, syslog, firewall logs, or other tools used to support monitoring and packet‑level analysis.
• Familiarity with network automation or scripting tools such as Ansible, Python, PowerShell, Terraform, or Cisco Catalyst Center to automate security baselines.
• Familiarity with Zero Trust principles, micro‑segmentation, identity‑based access control, and modern DoD cybersecurity architecture.
• CCNP, CCNP Security, Cisco CyberOps, or equivalent network security certification.
• CISSP, CEH, PenTest+, CySA+, CASP+, SecurityX, or equivalent cybersecurity certification.
• Knowledge of continuous monitoring, active threat hunting, and automated configuration compliance.

Applicable Military Backgrounds

• Army: 17C, 25B, 25D, 25H, 255A, 255N, 255S
• Navy: IT, ITS, ITN, ITR, CWT, 1820, 1880
• Air Force: 1B4X1, 1D7X1, 1D7X1A, 1D7X5, 17D, 17S
• Marine Corps: 0631, 0671, 0681, 1702, 1721
• Space Force: 5C0X1, 17X
• Coast Guard: IT, CMS, CMM, C5I

#DSA209

The posted salary range is a good‑faith estimate. Actual compensation will be based on the selected candidate’s qualifications, experience, skills, and other job‑related factors.

DSA - Salary Pay Range

$120,000 - $160,000 USD

Many of DSA's positions require the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens. In addition, applicants who accept a conditional offer of employment may be subject to government security investigation(s) and must meet eligibility requirements for access to classified information. DSA is proud to be an Equal Opportunity Employer. DSA is committed to treating all employees and applicants for employment with respect and dignity and maintaining a workplace that is free from unlawful discrimination. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status. DSA requires background checks , where permitted , by law. DSA is an E-Verify Employer.