Why this role stands out
This role offers a fantastic opportunity to grow your cybersecurity career within a reputable company supporting critical defense initiatives, where you'll hone your skills in application security testing and threat mitigation. If you're a proactive individual with a knack for identifying and resolving security vulnerabilities, you'll thrive in this impactful position. Apply now to contribute to cutting-edge cybersecurity solutions!
Quick overview
Job description
Company Overview By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide. Cole Engineering Services (CESI), a By Light company, is recognized as a premier provider of modeling and simulation (M&S) training solutions to the Federal Government and industry.
Since 2004, CESI has been at the forefront of developing, maintaining, and integrating simulation-based training, serious gaming, technical services, training and other support in live, virtual, constructive, and gaming (LVCG) domains. CESI also designs, builds and runs infrastructure, platforms, applications and processes that enable cyber training for the integrated multi-domain force. Our vision is to become a worldwide full spectrum LVCG and cyber training/analysis developer, integrator and services provider.
Position Overview Provide cybersecurity engineering support to DoD software application development activities through cybersecurity requirements definition, process enhancements and application security testing activities. Responsibilities
- Define cybersecurity requirements for software applications to meet program requirements and objectives.
- Provide recommendations to incorporate security engineering practices throughout the system development lifecycle.
- Perform assessments of cybersecurity requirement compliance using manual and automated software analysis tools and methods and present them to the customer as necessary.
- Perform assessments using adversarial tools, techniques, and methods against network-enabled applications and web applications to identify weaknesses, gaps, and vulnerabilities.
- Propose mitigation and countermeasures to reduce or eliminate software-level threats.
- Directly interface with the software development team to ensure software security engineering principles are applied throughout the system development lifecycle. Required Experience/Qualifications
- Bachelor's Degree in Computer Science, Engineering, Cybersecurity, IT or related field required; professional and/or military experience may be substituted in lieu of degree.
- This position requires certifications necessary to meet IAT Level II in accordance with DoD 8140 baseline certifications.
- IAT Level II certification is required immediately upon hire.
- Current certification status will be maintained by obtaining continuing education as specified by the certification authority.
- Experience in software engineering, development and/or systems engineering throughout all phases of the system development lifecycle.
- Systems administration skills, experience with Linux, security settings, services, hardening of systems (STIGs, security policies); any shell scripting or Python a plus.
- System troubleshooting, recovery, and advisory in the event of unexpected adverse configuration changes.
- Knowledge of threat assessment and solutions to mitigate or eliminate such threats.
- Experience with offensive security tools and adversarial techniques and methods.
- Experience implementing software application solutions to comply with NIST SP 800-53 security controls.
- Compliance and vulnerability reporting and similar formal technical documentation skills.
- Understanding of Risk and Compliance Frameworks. Preferred Experience/Qualifications
- An understanding of DoD acquisition processes and relevant cyber security processes, such as the Risk Management Framework (RMF).
- Security+ certification Special Requirements/Security Clearance Please note that pursuant to a government contract, this specific position requires U. S. Citizenship status with a current SECRET security clearance, with the ability to attain a TOP SECRET/SCI clearance. Security Clearance requirements will be specified in the Government's Task Order. This position is on-site and may require travel (less than 10%). Benefits Overview CESI recognizes that our strength is our people. We support every employee as an individual to build strong teams across the enterprise. Our benefit package includes:
- Medical, Dental & Vision Coverage
- Wellness Program
- 401(k) Matching
- Disability (Short Term & Long Term)
- Employee Assistance Program
- Life Insurance
- Education & Training
- Generous Leave Policy (11 Federal Holidays, PTO, Military Leave, Bereavement and Jury Duty)
Similar jobs
- RA

Embedded Software Security Engineer II (S3E)Recently posted
Raytheon · Tucson, AZ · Hybrid 🇺🇸
Technology$68.9k - $131.1k/yr - NI

Cyber Network Forensic Analyst IV with Security ClearanceRecently posted
Nightwing · Arlington, VA · On-site 🇺🇸
SplunkTCP/IPDNS+2TechnologySalary not listed - KF

Cyber Analyst with Security ClearanceRecently posted
Knight Federal Solutions, Inc. · Riverdale, MD · Hybrid 🇺🇸
TechnologySalary not listed - GS

Security Engineer - SIEM/SOAR - Northeast region
GuidePoint Security · United States · On-site 🇺🇸
AWSSOC 2Splunk+16TechnologySalary not listed - MA

Cyber Security RMF Analyst with Security ClearanceRecently posted
MANTECH · Stafford, VA · Hybrid 🇺🇸
SharePointTechnologySalary not listed - MW
Security & Governance Architect - Microsoft Cloud Technology SpecialistRecently posted
Mind Ware Inc · United States · Remote 🇺🇸
Generative AIAdministrativeSalary not listed - PE

Cyber Engineer with Security ClearanceRecently posted
PeopleTec · Huntsville, AL · On-site 🇺🇸
PythonAWSAzure+4TechnologySalary not listed - AD

Cyber Security Specialist with Security ClearanceRecently posted
Agile Defense · Fort Huachuca, AZ · Hybrid 🇺🇸
Microsoft ExcelMicrosoft PowerPointAgileTechnologySalary not listed - IS

Security Analyst IIIRecently posted
INSPYR Solutions · The Woodlands, TX · On-site 🇺🇸
SpringSplunkTechnologySalary not listed - PE

Information Security Systems Engineer (ISSE) with Security Clearance
Peraton · Chantilly, VA · Hybrid 🇺🇸
GCPAWSEncryption+10Technology$146k - $234k/yr - MS

Senior Security Engineer
Muon Space · San Jose, CA · Remote 🇺🇸
AWSSOC 2SSO+8Technology$184k - $208k/yr - PC
Cyber Security Analyst - Information Technology Auto Apply
ProSidian Consulting, LLC · Aiken, SC · On-site 🇺🇸
Microsoft ExcelMicrosoft OfficeMicrosoft Word+1TechnologySalary not listed
