Senior Cyber Vulnerability Management Engineer

Arcfield; Virginia (IL); On-site; USD 116,000 - 201,000; Full time

Benefits offered by this job

Health Insurance

Paid Time Off

Retirement Benefits

Learning & Development

Job summary

Arcfield is seeking a Vulnerability Management Cyber SE to support a national customer in cybersecurity. The role focuses on vulnerability lifecycle, RMF controls, and A&A, with responsibilities spanning metrics, reporting, and cross-domain analysis.

The candidate will interact with IC and DoD authorities, develop remediation plans, and coordinate with field ISSEs. A TS/SCI with Poly is required and core hours must be met.

Qualifications

• BS with 8-10 years of experience, MS with 6-8 years, or Ph.D. with 3-5 years.
• Must possess and maintain a TS/SCI with Poly.
• Familiarity with RMF, NIST 800-53 controls, and A&A processes.
• Experience implementing RMF and certification/ accreditation docs.
• Strong verbal and written communication skills.
• Ability to support core hours (0900-1500, Mon–Fri).

Responsibilities

• Support IT vulnerability management lifecycle.
• Prepare reports for IC and DoD authorities (USCYBERCOM, IC-SCC).
• Develop vulnerability analyses and metrics reports.
• Create asset vulnerability views by mission, location, and cross-domain factors.
• Coordinate with RMF stakeholders on BoE closures and EVAR findings.
• Prepare slides for weekly and monthly meetings.
• Research trending vulnerabilities using security tools.
• Contribute to process improvements for enterprise vulnerability analysis.

Skills

Analytical skills

Risk management

Strong communication

Self-starter

Flexibility

Education

BS + 8-10 yrs

MS + 6-8 yrs

PhD + 3-5 yrs

Tools

SNOW

Splunk

ACAS

Job description

Arcfield is seeking a Vulnerability Management Cyber SE to support a national customer in cybersecurity. The role focuses on vulnerability lifecycle, RMF controls, and A&A, with responsibilities spanning metrics, reporting, and cross-domain analysis.

The candidate will interact with IC and DoD authorities, develop remediation plans, and coordinate with field ISSEs. A TS/SCI with Poly is required and core hours must be met.