OT Cybersecurity Engineer – RMF & Incident Response

Sherpa-6; Ashburn (VA); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Competitive benefits package

On-site in Ashburn VA

Job summary

Sherpa 6 is seeking a Cybersecurity Engineer to support CBP OTOC and ISS OTOC security build-out, integration, and operation. The role focuses on cybersecurity engineering, vulnerability management, incident response, RMF risk assessments, and RMF/ATO support for complex operational technology and mission systems.

The candidate will translate operational requirements into practical security controls, assess vulnerabilities, and guide engineering teams in risk-based decision making throughout the

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Systems Engineering, or related technical discipline.
• 5+ years in cybersecurity engineering, information security, or closely related field.
• Experience with RMF, ATO processes, and secure system architectures.

Responsibilities

• Provide cybersecurity engineering support for integration, deployment, authorization, and sustainment of OT/mmission systems.
• Translate mission/operational requirements into actionable cybersecurity requirements.
• Identify vulnerabilities and support risk-based remediation strategies.
• Support RMF activities, ATO artifacts, and continuous monitoring.
• Advise cross-functional teams on cybersecurity risks and mitigations.

Skills

Cybersecurity engineering

Vulnerability management

Incident response

RMF / ATO processes

Threat assessment

Security architecture

Mission systems security

Education

Bachelor’s degree in Cybersecurity, CS, Info Systems or related field

Tools

SIEM

RMF tooling / SSPs

Job description

Sherpa 6 is seeking a Cybersecurity Engineer to support CBP OTOC and ISS OTOC security build-out, integration, and operation. The role focuses on cybersecurity engineering, vulnerability management, incident response, RMF risk assessments, and RMF/ATO support for complex operational technology and mission systems.

The candidate will translate operational requirements into practical security controls, assess vulnerabilities, and guide engineering teams in risk-based decision making throughout the