TS/SCI Cyber Defense Engineer - RMF & Zero Trust

Data Systems Analysts, Inc.; Washington (District of Columbia); On-site; USD 140,000 - 170,000; Full time

Job summary

Data Systems Analysts, Inc. (DSA) is seeking a TS/SCI‑cleared Cybersecurity Engineer to support RMF, ATO, and continuous authorization in a secure DoD environment. The role emphasizes vulnerability remediation, control implementation, and RMF documentation for accreditation sustainment.

Onsite at NGIC in Charlottesville, VA; relocation encouraged. Responsibilities include advising on security requirements, implementing controls, and supporting incident response and continuous monitoring.)

Qualifications

• BS degree in Engineering, Computer Science, or related field. Experience may be substituted for degree.
• TS/SCI Clearance

Responsibilities

• Serve as a hands-on cybersecurity technical authority across DoD systems, apps, networks, and enterprise environments.
• Advise on security requirements, system design, risk, and secure implementation to architects and engineers.
• Assess architectures, configurations, technologies to identify vulnerabilities and mitigation strategies.
• Perform vulnerability assessment and remediation using ACAS, Tenable/Nessus, SIEM, and other tools.
• Apply, validate, and troubleshoot DISA STIGs, SCAP benchmarks, and security controls.

Skills

Cybersecurity engineering

RMF/DoD cybersecurity

Vulnerability management

DISA STIGs/SCAP

ACAS/Tenable/Nessus

Windows/Linux

Risk Management Framework

Education

BS degree in Engineering, Computer Science, or related field

Tools

ACAS

eMASS

SCAP

Job description

Data Systems Analysts, Inc. (DSA) is seeking a TS/SCI‑cleared Cybersecurity Engineer to support RMF, ATO, and continuous authorization in a secure DoD environment. The role emphasizes vulnerability remediation, control implementation, and RMF documentation for accreditation sustainment.

Onsite at NGIC in Charlottesville, VA; relocation encouraged. Responsibilities include advising on security requirements, implementing controls, and supporting incident response and continuous monitoring.)