Residency Status: ALL CANDIDATES MUST BE A U.S. CITIZEN
Security Clearance: ALL Candidates MUST currently Possess an Active TS/SCI w/FS polygraph for consideration of this position.
Time Type: Full-Time, Daytime Schedule - 100% onsite
Travel Reimbursement: Yes (within a 50-mile radius to the worksite)
Company Benefits: Yes
Close Date: Thursday, November 12, 2026
Job DescriptionNAOVI is seeking a Cyber Security Project Engineer to support the following task:
Required Technologies/Tools- All candidates will need to currently possess an Active TSSCI w/FS polygraph for consideration of this position. Required
- At this time our company Does Not offer clearance sponsorships for any of our positions.
- All candidates must be U.S. Citizens.
- Demonstrated experience (significant and current) on real-time prevention, detection, and remediation of cyberattacks on internet-facing systems.
- Demonstrated experience in either offensive (e.g., penetration testing, red teaming, ethical hacking) or defensive (e.g., security operations, incident response, threat hunting) cyber operations.
- Demonstrated experience (proficiency) in scripting languages (e.g., Python, PowerShell, Bash) for automation and analysis.
- Demonstrated experience with security information and event management (SIEM) systems (e.g., Splunk, QRadar, Elastic Stack)
- Demonstrated experience with AWS cloud logging such as CloudTrail and CloudWatch.
- Demonstrated experience with network protocols, packet capture analysis, and netflow analysis.
- Demonstrated experience with security event log analysis, including Windows event logging and Syslog.
- Demonstrated understanding of network protocols, operating systems (Windows, Linux), and cloud environments (AWS, Azure, GCP).
- Demonstrated experience with various attack vectors, exploitation techniques, and defensive countermeasures.
- Demonstrated experience with Authority and Accreditation (A&A) packages needed to obtain security approvals for system deployments into production state.
- Demonstrated experience reviewing assessment reports and assist projects in identifying security risks, including technical and non-technical, and developing effective mitigation strategies, including Plan of Action and Milestones (POA&Ms).
- Demonstrated experience assuring system components and software applications adhere to continuous monitoring and compliance with Security accesses and controls.
- Demonstrated experience reviewing and authoring System Security Plans (SSP), security requirements, and other supporting documentation for the A&A process.
- Demonstrated experience writing and reviewing NIST 800-53 controls.
- Demonstrated experience running and interpreting Rapid7 scans.
- Demonstrated experience working with Amazon Cloud security.
- Demonstrated experience with data visualizations tools (e.g. Tableau) to support development of visual dashboards to assist stakeholders with overwatch/monitoring of systems.
- Demonstrated experience working effectively independently and as part of a team in a fast-paced environment.
Desired Technologies/Tools- Demonstrated experience with knowledge of information security standards such as ISO 27001 and NIST.
- Demonstrated experience with the ability to design, implement and maintain IDS/IPS technologies (Intrusion Detection System/Intrusion Prevention System).
- Demonstrated experience with common offensive security tools and methodologies (e.g., Metasploit, Nmap, Burp Suite, Cobalt Strike).
- Demonstrated experience processing software applications through the Agency's approving channels to operate within the Agency's Cloud offerings.
- Demonstrated experience working in a customer-facing environment.
- Demonstrated experience with Agency security policies and guidelines.
- Demonstrated exceptional analytical and problem-solving skills with the ability to dissect complex technical issues and propose effective solutions.
- Demonstrated experience working in the Agency's secure cloud computing environment.
Active Relevant CertificationsOSCP, GIAC, CEH, BCPen, CompTIA CySA+, PenTest+, (ISC)2 CISSP, or CSSLP.
Other Relevant Technologies/Tools- The Candidate shall deliver improvements in the overall cybersecurity posture of the Agency's systems and applications including analysis and reporting on security data.
- The Candidate shall design, implement, and optimize security monitoring solutions to detect advanced persistent threats (APTs), malware, and other cyberattacks.
- The Candidate shall lead and participate in cyber incident response activities, including investigation, containment, eradication, and recovery.
- The Candidate shall develop and refine incident response playbooks and procedures.
- The Candidate shall conduct comprehensive vulnerability assessments and penetration tests to identify and prioritize security weaknesses.
- The Candidate shall evaluate the effectiveness of existing security controls on Agency systems and applications.
- The Candidate shall provide guidance on security system design and implementation to include recommending and implementing security controls, tools, and technologies to enhance defensive capabilities.
- The Candidate shall conduct deep dive analytics, perform assessments and audits, and inform network engineering decisions.
- The Candidate shall ensure all Agency systems are secured and accredited with the required Agency approval boards.
- The Candidate shall create and maintain the necessary documentation required for accreditation.
- The Candidate shall track action items related to accreditation, work with the Agency teams to complete the actions, and report status to the appropriate agency Stakeholders.
- The Candidate shall leverage Artificial Intelligence (Al) as applicable to support and investigate the security of agency systems and applications.
- The Candidate shall conduct overwatch and monitoring responsibilities in alignment with Agency's policies.
- The Candidate shall conduct analysis on the agency's system and application security data to identify issues and inform remediation steps and mitigations.
- The Candidate shall maintain accurate and detailed documentation of security incidents, vulnerabilities, and mitigation strategies.
- The Candidate shall educate Agency teams on cybersecurity best practices.
- The Candidate shall contribute to the development and refinement of cybersecurity policies, standards, and procedures.
- The Candidate shall support tasks requiring collecting, compiling, evaluating, and publishing information and statistical data included in documents, records, forms, reports, plans, policies, and regulations.
- The Candidate shall develop methods for tracking, monitoring, and reporting cyber-security-related metrics for Agency management consumption and use.
