Senior Cyber Security Systems Engineer (RMF/A&A)

VTG; Chantilly (VA); On-site; USD 150,000 - 190,000; Full time

Job summary

VTG is seeking a Cyber Security Systems Engineer to support customer A&A projects, with TS clearance and polygraph. You will liaison between technical teams and security stakeholders, and develop SSPs/CONOPS for RMF and ICD 503 processes.

Ideal candidates have 11+ years of experience in complex enterprise environments, proficiency with security documentation, and hands-on use of tools like Greenlight, Splunk, and Rapid7. This on-site role is based in Chantilly, VA.

Qualifications

• Bachelor's or Master's preferred in a related field; waiver for direct ISSE support.
• Top Secret clearance with polygraph is required.
• Extensive experience (11+ years) in security engineering and A&A processes.
• Proven ability to document controls, develop SSPs/CONOPS, and coordinate audits.

Responsibilities

• Translate complex security concepts to clear documentation for stakeholders.
• Support RMF/ICD 503 A&A activities across multiple network enclaves.
• Develop and maintain SSPs and CONOPS using tools like Greenlight.
• Collect A&A artifacts (CP, GUG, PUG, SOPs) and support SCA/ISSO during reviews.
• Coordinate across engineering, contractors, and program teams for security artifacts.
• Track POA&Ms and monitor A&A lifecycle including re-accreditation timelines.

Skills

Communication

Multitasking

Facilitation

RMF ICD503

ISSE experience

ISSO experience

Cloud security

Vuln mgmt

Security documentation

Education

Bachelor's or Master's degree (preferred)

Tools

Greenlight

RoadRunner

Rapid7

WebInspect

AppDetective

Splunk

AWS

Azure

VMware

VDI

PKI

STIG

Job description

VTG is seeking a Cyber Security Systems Engineer to support customer A&A projects, with TS clearance and polygraph. You will liaison between technical teams and security stakeholders, and develop SSPs/CONOPS for RMF and ICD 503 processes.

Ideal candidates have 11+ years of experience in complex enterprise environments, proficiency with security documentation, and hands-on use of tools like Greenlight, Splunk, and Rapid7. This on-site role is based in Chantilly, VA.