Security Systems Engineer: Vulnerability & Compliance

PAE Government Services Inc.; Columbia (MD); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health, dental, vision insurance

Paid time off & holidays

401(k) with company match

Educational reimbursement

Parental leave

Job summary

PAE Government Services Inc. is seeking a Systems Engineer - Security to implement, operate, and maintain cybersecurity for enterprise networks in a highly secure DoD-focused environment.

The role emphasizes vulnerability management, ACAS/Nessus scanning, RMF/NIST controls, and hardening via STIGs. On-site work with a team of admins, ISSOs, and cybersecurity personnel is required. A TS/SCI clearance is a must, with IAT3 certifications expected.

Qualifications

• 5+ years of experience supporting cybersecurity operations, vulnerability management, system administration, or security engineering.
• Experience deploying and administering ACAS/Tenable Security Center and Nessus scanners.
• Experience conducting vulnerability assessments and interpreting scan results.
• Experience remediating OS, app, and config vulnerabilities in Windows and Linux.
• Experience with enterprise patch management solutions (WSUS, Ivanti, MECM/SCCM).
• Familiarity with Trellix/HBSS, Defender, Tanium or similar endpoint security.
• Knowledge of DISA STIGs, SCAP Compliance Checker, and security hardening.
• Experience with RMF, NIST 800-53, STIGs for DoD environments.
• Networking knowledge (TCP/IP, firewalls, switches).
• Strong communication for technical findings.

Responsibilities

• Deploy, configure, administer, and maintain ACAS/Tenable Security Center infrastructure and scanning solutions.
• Perform vulnerability scans across Windows, Linux, network, and virtual environments.
• Prioritize remediation based on risk and mission impact.
• Coordinate remediation with system and network admins.
• Develop vulnerability management processes, reporting, and metrics.
• Administer endpoint security platforms (HBSS/Defender/Tanium).
• Support RMF and DoD compliance activities and security audits.
• Perform system hardening using DISA STIGs and CIS benchmarks.
• Develop scripts to automate vulnerability management and reporting.
• Assist incident response and security operations as needed.

Skills

Cybersecurity operations

Vulnerability management

ACAS/Tenable

Nessus scanners

RMF/NIST 800-53

DISA STIGs

PowerShell/Bash/Python

HBSS/Microsoft Defender

DoD compliance

Networking basics

Education

High School Diploma or equivalent

Bachelor's Degree in IT/CS/Engineering

Tools

ACAS/Tenable Security Center

Nessus

Trellix/HBSS

Microsoft Defender

Tanium

WSUS/MECM/SCCM

Job description

PAE Government Services Inc. is seeking a Systems Engineer - Security to implement, operate, and maintain cybersecurity for enterprise networks in a highly secure DoD-focused environment.

The role emphasizes vulnerability management, ACAS/Nessus scanning, RMF/NIST controls, and hardening via STIGs. On-site work with a team of admins, ISSOs, and cybersecurity personnel is required. A TS/SCI clearance is a must, with IAT3 certifications expected.