Cybersecurity Engineer II (Secret clearance required) at DirectViz Solutions, LLC in Virginia Beach, VA, USA

Job description

• Summary DVS is seeking a Cybersecurity Engineer II to support Department of the Navy cybersecurity compliance, system hardening, vulnerability management, continuous monitoring, and system authorization activities. The engineer performs DoD-mandated cybersecurity scans and compliance checks; supports Authorization to Operate (ATO), Assess Only authorization and accreditation package maintenance, and Annual Security Review activities; evaluates and applies DISA STIG requirements to network systems and endpoint configurations; manages infrastructure patching and network device IOS updates; and remediates vulnerabilities across mission-critical Navy radar, data-distribution, server, endpoint, and network environments. Hands-on experience with Red Hat Enterprise Linux (RHEL) 8, 9, and 10 is required.

Responsibilities

• Perform system hardening in accordance with applicable DoD and Navy cybersecurity requirements.
• Conduct DoD-mandated vulnerability assessments using ACAS.
• Conduct SCAP scans and automated STIG compliance checks.
• Implement and assess applicable DISA STIG requirements.
• Review quarterly STIG releases and assess system and operational impacts.
• Support ATO audits, Annual Security Reviews, and continuous monitoring activities.
• Analyze ACAS, SCAP, and STIG findings and develop or update POA&M entries.
• Track cybersecurity vulnerabilities and remediation activities through closure.
• Remediate vulnerability findings, including implementation of vendor patches on Linux and Windows operating systems.
• Apply Security Management policy guidance and directives to cybersecurity activities.
• Support day-to-day cybersecurity operations and maintenance of network, server, and hardware resources.
• Administer, secure, patch, and troubleshoot Red Hat Enterprise Linux (RHEL) 8, 9, and 10 systems in accordance with approved configuration baselines and cybersecurity requirements.
• Maintain Assess Only authorization and accreditation packages, including supporting evidence, assessment artifacts, control documentation, findings, and package updates required to sustain an accurate authorization posture.
• Plan, coordinate, implement, and verify infrastructure patching and network device IOS upgrades while assessing operational impact, documenting changes, and validating remediation.
• Apply, assess, document, and remediate applicable DISA STIG requirements across network systems, network devices, servers, and endpoint configurations.
• Coordinate with technical and cybersecurity stakeholders to address compliance findings and maintain system security posture.

Requirements

• Bachelor's degree in Cybersecurity, Cyber Operations, Cyber Engineering, Information Systems, Information Technology, Computer/Electrical/Electronics Engineering, Software Engineering, Computer Science, Mathematics with a concentration in Computer Science, or an equivalent discipline.
• 5 years of full-time professional experience performing system hardening.
• Or High school diploma/GED plus ten years of experience
• Demonstrated experience implementing STIGs, performing ACAS vulnerability assessments, applying Security Management policy guidance/directives, and remediating vulnerabilities and implementing vendor patches on Linux and Windows systems.
• Demonstrated hands-on experience administering, hardening, patching, and troubleshooting Red Hat Enterprise Linux (RHEL) 8 and 9; experience with RHEL 10 is required or must be current enough to support transition and sustainment activities.
• Experience maintaining Assess Only authorization and accreditation packages and supporting cybersecurity assessment and authorization documentation throughout the package lifecycle.
• Working knowledge of infrastructure patch management and network device IOS management, including planning, implementation, validation, rollback considerations, and documentation.
• Experience applying and assessing DISA STIGs on network systems and devices, as well as server and endpoint configurations, and documenting or remediating resulting findings.
• Certifications: IAT Level II - (one of the following) CCNA Security, CySA+, GICSP, GSEC, Security+CE, CND, or SSCP
• SECRET clearance. Required

Skills

Required

• System hardening
• Vulnerability assessment using ACAS
• SCAP scans
• Automated STIG compliance checks
• DISA STIG implementation and assessment
• POA&M development and updates
• Security Management policy guidance
• Infrastructure patch management
• Network device IOS management
• SECRET clearance