Technical Consultant- Cyber Security Engineering

NextGenEnergyJobs; Vienna, Northern (VA, KY); Hybrid; USD 110,000 - 160,000; Full time

Job summary

NextGenEnergyJobs is seeking a Technical Consultant- Cyber Security Engineering to secure systems supporting critical Defense and Intelligence missions. You will apply RMF processes, develop SSPs and ATO artifacts, and coordinate with DevSecOps to embed security throughout the system lifecycle.

The role requires hands-on vulnerability management, DoD guidance experience, and strong collaboration with engineers and program leadership. US citizenship and TS eligibility apply.

Qualifications

• Bachelor's degree or higher in CS, cybersecurity, or STEM fields.
• 5+ years in a similar cyber security engineering role.
• Hands-on RMF/A&A documentation experience (POA&Ms, SSPs).
• Experience with vulnerability scanning and remediation tracking.
• Familiarity with DoD guidance and NIST 800-53 controls.
• Active DoD 8570 IAT Level II or higher certification preferred.

Responsibilities

• Apply RMF processes for A&A including control selection and monitoring.
• Develop and maintain SSPs, POA&Ms, SARs, and ATO artifacts (XACTA/eMASS).
• Perform vulnerability assessments and track remediation (ACAS).
• Align security controls with NIST 800-53 and DoD guidance.
• Support system hardening, patching, and STIG compliance.
• Monitor security events and assist incident response and risk mitigation.
• Collaborate with engineers and DevSecOps to integrate security into the lifecycle.

Skills

RMF experience

A&A documentation

Vulnerability assessments

Incident response

Analytical skills

Team collaboration

Communication

Education

Bachelor's degree in CS/IT/STEM

Master's degree in CS/IT/STEM

Tools

XACTA

eMASS

ACAS

Job description

Technical Consultant- Cyber Security Engineering

This position plays a hands-on role securing systems that support critical Defense and Intelligence missions.

Key Responsibilities

• Apply RMF processes to support system Assessment & Authorization (A&A), including control selection, implementation, assessment, and continuous monitoring
• Develop, review, and maintain security documentation such as SSPs, POA&Ms, SARs, and ATO artifacts in tools such as XACTA or eMASS
• Conduct vulnerability assessments and compliance scans (such as ACAS) and track remediation of findings and IAVM requirements
• Implement and validate security controls aligned with NIST 800-53, CNSSI 1253, and related DoD guidance
• Support system hardening, patching, and configuration management in compliance with STIGs for Linux, Windows, and network devices
• Monitor systems for security events and supporting incident response and risk mitigation activities
• Assess security impacts of system changes and supporting configuration control boards (CCBs)
• Collaborate with system engineers, administrators, and DevSecOps teams to integrate security throughout the system lifecycle
• Provide cybersecurity risk input to program leadership, Authorizing Officials (AOs), and stakeholders

Requirements

• 5+ years of professional experience in a similar position, supporting similar responsibilities
• Professional experience with RMF, A&A, POA&M, and ATO documentation (XACTA/eMASS)
• Hands-on experience with vulnerability scanning and compliance tracking (ACAS, IAVM)
• Experience securing Linux and Windows systems, STIGs, patching, and system hardening
• Knowledge of NIST 800-series publications and incident response processes
• DoD 8570 IAT Level II or higher certification (such as Security +, CySA +, CISSP)
• Strong analytical, communication, and collaborative skills
• US citizenship with Active or Current (within 2 years of active) Top Secret Security Clearance with SCI eligibility
• Bachelor's degree in Computer Science, Cybersecurity, Information Technology or STEM related field
• Scripting or development experience (Python, Java, React)
• DevSecOps tools and pipeline experience
• Experience with Linux (Red Hat/CentOS), databases, web apps, or big data platforms
• Familiarity with Agile environments and tools (Jira, Confluence)
• Experience with NIST SP 800-171 and System Security Engineering (SSE)
• Master's degree in Computer Science, Cybersecurity, Information Technology or STEM related field
• #LI-SS2
• #LI-Onsite
• Esri’s competitive total rewards strategy includes industry-leading health and welfare benefits: medical, dental, vision, basic and supplemental life insurance for employees (and their families), 401(k) and profit-sharing programs, minimum accrual of 80 hours of vacation leave, twelve paid holidays throughout the calendar year, and opportunities for personal and professional growth. Base salary is one component of our total rewards strategy. Compensation decisions and the base range for this role take into account many factors including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs.
• A reasonable estimate of the base salary range is