5-7 years of experience in cybersecurity engineering and A&A activities.
Proficient in Risk Management Framework (RMF) processes and ATO requirements.
Strong knowledge of security control implementation and continuous monitoring practices.
Experience in identifying and mitigating cybersecurity vulnerabilities and risks.
Familiarity with federal cybersecurity standards and compliance requirements.
Skilled in developing and maintaining cybersecurity documentation and assessment artifacts.
Active Top Secret/SCI clearance required.
Responsibilities
Provide technical leadership for cybersecurity engineering and compliance activities.
Lead efforts to obtain and maintain system Authority to Operate (ATO) approvals.
Implement and assess security controls to meet cybersecurity policies and standards.
Develop and maintain Risk Management Framework (RMF) documentation and authorization packages.
Identify and mitigate cybersecurity vulnerabilities affecting enterprise systems.
Coordinate security testing and compliance reviews for operational readiness.
Oversee continuous monitoring and risk management activities.
Benefits
Collaborative work environment with government and technical teams.
Opportunity to lead mission-critical cybersecurity initiatives.
Engagement with cutting-edge cybersecurity technologies and practices.
Professional development opportunities in a federal government setting.
Full Job Description
Lead Cyber Engineer - TS/SCI
Department: Government Customer - Chantilly
Location: Chantilly, VA
ACTIVE TS/SCI CLEARANCE REQUIRED TO BE CONSIDERED FOR THIS POSITION
Job Responsibilities
Provide technical leadership for cybersecurity engineering, Assessment and Authorization (A&A), and security compliance activities supporting mission-critical information systems.
Lead cybersecurity activities required to obtain and maintain system Authority to Operate (ATO) approvals throughout the system lifecycle.
Implement, assess, and maintain security controls to ensure systems meet applicable cybersecurity policies, standards, and compliance requirements.
Develop, review, and maintain Risk Management Framework (RMF) documentation, system security plans, assessment artifacts, and authorization packages.
Identify, evaluate, document, and mitigate cybersecurity vulnerabilities and risks affecting enterprise systems and mission operations.
Coordinate security testing, vulnerability assessments, compliance reviews, and remediation activities to support system authorization and operational readiness.
Collaborate with system engineers, administrators, government security representatives, and mission stakeholders to integrate cybersecurity requirements into system design and operations.
Track security findings, Plans of Action and Milestones (POA&Ms), remediation efforts, and corrective actions to ensure continued compliance.
Assess security control effectiveness and provide technical recommendations to address vulnerabilities, reduce risk, and strengthen cybersecurity posture.
Develop cybersecurity reports, briefings, technical documentation, and status updates for government stakeholders and leadership.
Required Qualifications
Experience supporting cybersecurity engineering, system security assessments, and Assessment and Authorization (A&A) activities.
Demonstrated experience with Risk Management Framework (RMF) processes and Authority to Operate (ATO) requirements.
Knowledge of security control implementation, assessment, documentation, and continuous monitoring practices.
Experience identifying system vulnerabilities, evaluating cybersecurity risks, and coordinating mitigation or remediation activities.
Familiarity with applicable federal cybersecurity standards, policies, and compliance requirements.
Experience developing and maintaining cybersecurity documentation, security assessment artifacts, and authorization packages.
Understanding of system security architecture, vulnerability management, and cybersecurity risk assessment methodologies.
Ability to coordinate with technical teams, government security personnel, and mission stakeholders.
Strong technical leadership, communication, and documentation skills.
Active Top Secret/SCI clearance.
Desired Qualifications
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical field.
Experience supporting cybersecurity programs within the Department of Defense (DoD), Intelligence Community (IC), or other federal government environments.
Familiarity with NIST SP 800-53, NIST RMF, and applicable DoD or IC cybersecurity requirements.
Experience preparing or managing security authorization documentation using eMASS, Xacta, or comparable security management platforms.
Knowledge of Security Technical Implementation Guides (STIGs), vulnerability scanning technologies, and security configuration assessments.
Experience supporting system accreditation, authorization renewals, security inspections, and continuous monitoring programs.
Familiarity with enterprise networks, operating systems, cloud security, and secure system architecture.
Professional certifications such as CISSP, CISM, CGRC, CompTIA Security+, or equivalent cybersecurity credentials.
