III – Top Secret Clearance | Norfolk, VA

Cambridge International Systems Inc•Norfolk, VA

2d•Onsite

About The Position

Join a dynamic global team united by shared values: commitment, integrity, and perseverance. At Cambridge, you’ll work alongside top talent worldwide, tackling some of today’s most complex and critical challenges in defense and security. We are currently seeking a Cyber Security Engineer to support operations in Norfolk, VA. This is a full-time, CONUS position requiring an active DoD Top Secret clearance. This position is contingent upon contract award with an expected award date of March 2026. What You’ll Do As a Cyber Security Engineer, you will play a critical role in monitoring, analyzing, and detecting cyber events and incidents within information systems and networks, that serve U.S. government missions at the Cambridge corporate office. You will:

Requirements

HS Diploma + 5 years of relevant experience
Experience with the RMF Process
Experience with policy and RMF artifact development.
Ability to lead a team of cyber security professionals and direct tasking and provide mentorship and leadership.
Experience web-based applications designed to support the RMF and A&A such as eMASS and MCCAST.
CISSP or CASP+ certification
Must have a current and active DoD Top Secret security clearance.
Proficient with modern IT tools and infrastructure technologies
Develops technical solutions to complex problems.
Exercises considerable latitude in determining objectives and approaches to assignment.

Nice To Haves

Desire experience with HBSS.

Responsibilities

Monitor and analyze networks, system logs, and security alerts to identify, investigate, and escalate cybersecurity incidents.
Support enterprise cyber defense operations by maintaining security tools and aligning activities with RMF, NIST, and organizational risk frameworks.
Assess cybersecurity requirements, conduct vulnerability and risk assessments, and identify security gaps across systems and architectures.
Develop, implement, and maintain cybersecurity controls, policies, and A&A documentation to support accreditation and compliance.
Lead vulnerability management and incident response efforts, including remediation tracking and regulatory reporting.
Test and validate security controls to ensure operational effectiveness and compliance.
Design and support secure DoD Information Assurance architectures and system integrations.
Provide cybersecurity training, lead post-incident reviews, and promote a strong security awareness culture.