Senior Cybersecurity Engineer - Vulnerability & Risk Lead

Electrosoft; Fort Belvoir (VA); Sur place; USD 110 000 - 160 000; Plein temps

Résumé du poste

Electrosoft Services, LLC is seeking a Cybersecurity Engineer to serve as the technical lead for enterprise web application and infrastructure vulnerability management. The engineer plans, executes, and supports vulnerability assessments, validates findings, prioritizes remediation activities, and implements security controls to reduce organizational cyber risk.

This role collaborates with system owners, developers, network engineers, and cybersecurity teams to ensure compliance with DoD

Qualifications

• Ten years of IT experience with DoD-style cybersecurity work.
• OT experience of at least five years in a related environment.
• Moderate Risk/Confidential/NACLC/ANACI clearance at proposal time.
• IASAE III certification within six months of contract start.
• Matching CE certifications such as MCSA/CCA/Azure Security.

Responsabilités

• Conduct authenticated and unauthenticated vulnerability scans of web apps, APIs, servers, databases and networks.
• Perform web app security assessments using automated and manual testing.
• Validate vulnerabilities to reduce false positives.
• Analyze CVEs/CWEs and associated risks.
• Prioritize remediation using CVSS and mission impact.
• Develop remediation recommendations and mitigation strategies.
• Support patch management and verify remediation effectiveness.
• Review secure configurations against DISA STIGs and baselines.
• Produce technical reports, dashboards, and risk summaries.
• Coordinate with ISSOs, developers, and infrastructure teams.
• Support Authority to Operate (ATO) activities and POA&M.
• Assist during audits and inspections.
• Maintain vulnerability metrics and KPIs.
• Develop scripts/automation to improve processes.

Connaissances

Vulnerability assessment

Web app security

CVSS prioritization

Remediation guidance

Incident response support

Formation

IASAE III Certification

DOD 8570/8140 IAT III

CE: MCSE/MCAS/CCNA/Azure/Security+

Description du poste

Electrosoft Services, LLC is seeking a Cybersecurity Engineer to serve as the technical lead for enterprise web application and infrastructure vulnerability management. The engineer plans, executes, and supports vulnerability assessments, validates findings, prioritizes remediation activities, and implements security controls to reduce organizational cyber risk.

This role collaborates with system owners, developers, network engineers, and cybersecurity teams to ensure compliance with DoD