Journeyman Cybersecurity Engineer with Security Clearance

Journeyman Cybersecurity Engineer Location: Multiple DoD Locations Clearance: Secret or Top Secret Eligible/Active Travel: None Responsibilities
Support Risk Management Framework (RMF) implementation and cybersecurity compliance activities throughout the system lifecycle. Lead or support Assessment & Authorization (A&A) efforts and maintain Authorization to Operate (ATO) packages within eMASS. Develop, maintain, and review cybersecurity documentation, including System Security Plans (SSPs), Security Risk Analyses, Program Protection Plans, OPSEC Plans, POA&Ms, and related security artifacts.

Ensure cybersecurity requirements are integrated into system design, development, engineering, and operational activities. Conduct vulnerability assessments, security audits, and compliance reviews to identify and mitigate cyber risks. Execute vulnerability management activities, including vulnerability scanning, remediation tracking, and reporting. Support implementation and validation of RMF security controls in accordance with NIST SP 800-53 and DoD cybersecurity requirements.

Perform continuous monitoring (ConMon) activities and assess the impact of system and configuration changes on security posture. Support STIG implementation, compliance validation, and system hardening efforts. Coordinate with Program Managers, System Owners, Authorizing Officials, and engineering teams to maintain and improve cybersecurity posture. Develop and maintain POA&Ms and corrective action plans to address cybersecurity findings. Analyze cybersecurity incidents, assess root causes, and support remediation efforts.

Support security-related reviews during system acquisitions, engineering activities, testing, and sustainment efforts. Assist with access control administration, PKI management, user account management, and security configuration management. Develop reports and metrics on security posture, vulnerability trends, compliance status, and remediation progress. Deliver cybersecurity awareness and training initiatives as required. Stay current on emerging threats, vulnerabilities, technologies, and DoD cybersecurity guidance.

Requirements Active Secret or Top Secret security clearance with the ability to maintain eligibility. Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related technical field.
5+ years of cybersecurity experience supporting DoD systems and programs. Experience implementing Risk Management Framework (RMF) requirements and maintaining cybersecurity documentation. Experience with eMASS and Authorization to Operate (ATO) processes. Knowledge of NIST SP 800-53 security controls and DoD cybersecurity policies.

Experience performing vulnerability assessments, remediation tracking, and risk analysis. Familiarity with STIG compliance requirements and security hardening practices. Knowledge of networking concepts, protocols, and cybersecurity architectures. Experience supporting Windows and Linux environments. Strong analytical, troubleshooting, and problem-solving skills. Excellent written and verbal communication skills. Ability to work independently and effectively collaborate across technical and non-technical teams.

Preferred Qualifications IAM Level III certification (CISSP, CISM, GSLC, or equivalent). Security+ or additional DoD 8140/8570 certifications. Experience supporting Air Force or other DoD weapon systems and mission systems. Experience with ACAS/Tenable products, including Nessus and Tenable.sc. Experience supporting vulnerability management programs and compliance reporting. Experience developing SSPs, POA&Ms, and RMF artifacts. Familiarity with DevSecOps, DevOps, Agile development methodologies, and CI/CD pipelines. Experience with DoD cloud environments and cloud security requirements.

Python, PowerShell, or other scripting experience. Experience supporting classified environments, information assurance programs, and security accreditation activities. Experience coordinating with CSSPs, Authorizing Officials, and cybersecurity stakeholders.

Compensation: $120,000-$150,000