Job Type
Full-time
Description
Position OverviewSpatial Front is seeking a
Cybersecurity Engineer to support and secure mission-critical infrastructure across a large enterprise environment comprising
900+ servers.
In this role, you will lead hands-on vulnerability management, security compliance, and Risk Management Framework (RMF) authorization processes. You will serve as a technical expert responsible for continuous scanning, STIG application, POAM tracking, and remediation strategies to safeguard our federal client's assets.
Location: Arlington, VA (hybrid/On-Site)Responsibilities- Vulnerability Assessment & Mitigation: Perform automated and credentialed enterprise vulnerability scans across 900+ Windows/Linux server assets using Assured Compliance Assessment Solution (ACAS / Tenable.sc). Analyze raw scan results, evaluate true/false positives, prioritize risk, and coordinate patch/remediation workflows with systems administrators.
- Compliance & Hardening: Execute end-to-end Security Technical Implementation Guide (STIG) application and evaluation across large-scale server infrastructures. Validate compliance utilizing DISA STIG Viewer and automated benchmarks (SCAP Content).
- RMF & Authorization Artifacts: Lead and support Risk Management Framework (RMF) Steps 1 through 6 lifecycle activities. Prepare, maintain, and upload standard compliance artifacts into Enterprise Mission Assurance Support Service (eMASS) to maintain continuous Authority to Operate (ATO) posture.
- POA&M Management: Author, manage, and track Plans of Action and Milestones (POA&Ms) for open vulnerabilities and non-compliant controls. Work with stakeholders to define mitigation strategies, root cause analyses, and realistic completion milestones.
- Security Reporting & Ops: Drive continuous monitoring strategies, presenting vulnerability and compliance metrics to agency leadership and federal stakeholders.
Requirements
- Clearance: Must be a U.S. Citizen with an active Secret Clearance (or ability to obtain/pass a federal background investigation).
- Education & Experience: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent operational experience) + 5+ years of dedicated cybersecurity engineering experience.
- Certifications: Active CompTIA Security+ (IAT Level II compliant).
- Hands-On Scale Experience:
- Proven experience conducting ACAS scans and vulnerability analysis across large environments (900+ servers).
- Direct experience applying and evaluating DISA STIGs at enterprise scale.
- Deep working knowledge of DoD RMF processes and direct experience navigating eMASS.
- Strong proficiency in writing, managing, and closing out POA&Ms.
Desired / Nice-To-Have Qualifications- Identity & Access Management: Hands-on experience with Identity, Credential, and Access Management (ICAM), including user provisioning, role-based access control (RBAC), and access review tracking.
- Log Management & Auditing: Practical experience analyzing audit logs, building dashboards, and configuring security alerts using Splunk and Audit Vault systems.
- Advanced Certifications: CISSP (Certified Information Systems Security Professional), CISM, or CASP+.
- Experience with automated vulnerability/patch management tooling and scripting (e.g., PowerShell, Python, or Bash).
Additional Information- Clearance: Must be a U.S. Citizen with an active Secret security clearance or the ability to obtain one.
- Work Environment: On-site/Hybrid as required by the contract and program.
- Benefits: SFI offers a comprehensive benefits package. Details available at SFI Careers.
- This is a full-time, W2 position.
- No agencies, third parties, or Corp-to-Corp submissions.
Salary Description
$120,000-150,000
