Cybersecurity Engineer II (Secret clearance required)

DirectViz Solutions•Virginia Beach, VA

6d•Onsite

About The Position

DirectViz Solutions (DVS) is seeking a Cybersecurity Engineer II to support Department of the Navy cybersecurity compliance, system hardening, vulnerability management, continuous monitoring, and system authorization activities. The engineer performs DoD-mandated cybersecurity scans and compliance checks; supports Authorization to Operate (ATO), Assess Only authorization and accreditation package maintenance, and Annual Security Review activities; evaluates and applies DISA STIG requirements to network systems and endpoint configurations; manages infrastructure patching and network device IOS updates; and remediates vulnerabilities across mission-critical Navy radar, data-distribution, server, endpoint, and network environments. Hands-on experience with Red Hat Enterprise Linux (RHEL) 8, 9, and 10 is required.

Requirements

Bachelor's degree in Cybersecurity, Cyber Operations, Cyber Engineering, Information Systems, Information Technology, Computer/Electrical/Electronics Engineering, Software Engineering, Computer Science, Mathematics with a concentration in Computer Science, or an equivalent discipline.
5 years of full-time professional experience performing system hardening.
Demonstrated experience implementing STIGs, performing ACAS vulnerability assessments, applying Security Management policy guidance/directives, and remediating vulnerabilities and implementing vendor patches on Linux and Windows systems.
Demonstrated hands-on experience administering, hardening, patching, and troubleshooting Red Hat Enterprise Linux (RHEL) 8 and 9; experience with RHEL 10 is required or must be current enough to support transition and sustainment activities.
Experience maintaining Assess Only authorization and accreditation packages and supporting cybersecurity assessment and authorization documentation throughout the package lifecycle.
Working knowledge of infrastructure patch management and network device IOS management, including planning, implementation, validation, rollback considerations, and documentation.
Experience applying and assessing DISA STIGs on network systems and devices, as well as server and endpoint configurations, and documenting or remediating resulting findings.
Certifications: IAT Level II - (one of the following) CCNA Security, CySA+, GICSP, GSEC, Security+CE, CND, or SSCP
SECRET clearance - Required
Maintain focus and awareness throughout scheduled working hours.
Perform tasks requiring prolonged periods of sitting or standing at a desk, utilizing a computer, mouse, and keyboard.
Lift and move objects weighing up to 15 pounds as needed.
Exhibit excellent verbal and written communication skills, with a strong command of the English language.
Demonstrate the ability to work independently while also collaborating effectively as part of a team.
Quickly learn and retain routine tasks and processes.
Possess strong organizational skills, attention to detail, business correspondence proficiency, and self-management capabilities.
Perform the essential functions of the role satisfactorily; reasonable accommodation will be provided for employees with disabilities upon request.
Accept and adapt to additional responsibilities or changes to assigned duties as determined by DirectViz Solutions (DVS).

Nice To Haves

High school diploma/GED plus ten years of experience

Responsibilities

Perform system hardening in accordance with applicable DoD and Navy cybersecurity requirements.
Conduct DoD-mandated vulnerability assessments using ACAS.
Conduct SCAP scans and automated STIG compliance checks.
Implement and assess applicable DISA STIG requirements.
Review quarterly STIG releases and assess system and operational impacts.
Support ATO audits, Annual Security Reviews, and continuous monitoring activities.
Analyze ACAS, SCAP, and STIG findings and develop or update POA&M entries.
Track cybersecurity vulnerabilities and remediation activities through closure.
Remediate vulnerability findings, including implementation of vendor patches on Linux and Windows operating systems.
Apply Security Management policy guidance and directives to cybersecurity activities.
Support day-to-day cybersecurity operations and maintenance of network, server, and hardware resources.
Administer, secure, patch, and troubleshoot Red Hat Enterprise Linux (RHEL) 8, 9, and 10 systems in accordance with approved configuration baselines and cybersecurity requirements.
Maintain Assess Only authorization and accreditation packages, including supporting evidence, assessment artifacts, control documentation, findings, and package updates required to sustain an accurate authorization posture.
Plan, coordinate, implement, and verify infrastructure patching and network device IOS upgrades while assessing operational impact, documenting changes, and validating remediation.
Apply, assess, document, and remediate applicable DISA STIG requirements across network systems, network devices, servers, and endpoint configurations.
Coordinate with technical and cybersecurity stakeholders to address compliance findings and maintain system security posture.