Senior DoD Security Engineer | Automation & Compliance

Scientific Research Corporation; Orlando (FL); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

401(k) match

Health, dental, and vision

Tuition reimbursement

Paid time off

11 holidays

Job summary

Scientific Research Corporation seeks a hands-on Agile-embedded Security Engineer to secure virtualized Modeling & Simulation environments and automate compliance-as-code across a diverse infrastructure.

The role advises security leadership, manages vulnerabilities, and maintains continuous compliance with DoD directives while integrating security into CI/CD within Agile squads. A DoD clearance is required for this position.

Qualifications

• Active DoD 8570/8140 IAT Level II baseline credential required on day one.
• Active DoD Secret clearance with TS/SCI eligibility.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related technical field (equivalent professional experience will be considered).
• Strong understanding of network protocols, security architecture patterns, and hands-on experience securing both Linux-based and Windows-based systems.
• Highly proficient in scripting and programming languages (e.g., Python, PowerShell, Bash).
• Hands-on experience with modern automation and configuration management tools (Ansible, Terraform, Puppet, or Chef).
• Practical understanding of CI/CD concepts, including embedding security controls and compliance-as-code into deployment pipelines.
• In-depth knowledge of modern threat landscapes, software vulnerabilities, threat mitigation techniques, and standard security processes.
• Strong familiarity with cybersecurity frameworks and control sets, specifically NIST SP 800-53, NIST SP 800-171, SOC 2, and/or ISO 27001.
• Proven ability to author clear, concise cybersecurity guidance, SOPs, and program documentation.

Responsibilities

• Implementing, coordinating, and maintaining patching procedures across diverse environments, including Linux, Windows, VMware virtual layers, and Cisco network systems.
• Designing and deploying automated patching processes for Windows and Linux workloads to minimize manual intervention and reduce the overall attack surface.
• Executing and reviewing regular vulnerability scans and DISA STIG compliance audits to assess system risk.
• Analyzing vulnerability data to prioritize and execute remediation efforts across endpoints, networks, and software applications.
• Being responsible for securing and hardening physical and virtual hardware, operating systems, and software configurations.
• Supporting the tracking, resolution, and milestone completion for POA&M items.
• Authoring, updating, and maintaining comprehensive program security policies, operational procedures, and technical security standards.
• Ensuring all engineering and operational activities comply with relevant DoD standards, directives, regulations, and NIST frameworks.
• Conducting structured risk assessments and providing direct technical support for program audit activities.
• Serving as a key technical advisor to the ISSO and ISSM on security, engineering, and monitoring of classified DoD networks.
• Creating, updating, and maintaining detailed data flow and system boundary diagrams to support authorization packages.
• Remaining continuously abreast of emerging technologies, cyber threats, vulnerabilities, and modern security tools.

Skills

Python

PowerShell

Bash

CI/CD concepts

NIST 800-53/800-171

DoD 8570/8140 IAT Level II

Vulnerability management

Threat modeling

Security tooling

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field

Tools

Ansible

Terraform

Puppet

Chef

Splunk

Trellix

Wazuh

Docker

Kubernetes

VMware

Cisco networking

Job description

Scientific Research Corporation seeks a hands-on Agile-embedded Security Engineer to secure virtualized Modeling & Simulation environments and automate compliance-as-code across a diverse infrastructure.

The role advises security leadership, manages vulnerabilities, and maintains continuous compliance with DoD directives while integrating security into CI/CD within Agile squads. A DoD clearance is required for this position.