Cybersecurity Engineer II (Secret clearance required)

DirectViz Solutions•Virginia Beach, VA

8d•Onsite

About The Position

DirectViz Solutions (DVS) is seeking an Engineer, Cybersecurity II to support Department of the Navy cybersecurity compliance, system hardening, vulnerability management, and continuous monitoring activities. The engineer performs DoD-mandated cybersecurity scans and compliance checks, supports ATO and Annual Security Review activities, evaluates STIG requirements, and remediates vulnerabilities across Navy systems and networks for mission-critical Navy radar and data-distribution systems.

Requirements

Bachelor's degree in Cybersecurity, Cyber Operations, Cyber Engineering, Information Systems, Information Technology, Computer/Electrical/Electronics Engineering, Software Engineering, Computer Science, Mathematics with a concentration in Computer Science, or an equivalent discipline.
5 years of full-time professional experience performing system hardening.
Or High school diploma/GED plus ten years of experience
Demonstrated experience implementing STIGs, performing ACAS vulnerability assessments, applying Security Management policy guidance/directives, and remediating vulnerabilities and implementing vendor patches on Linux and Windows systems.
Certifications: IAT Level II - (one of the following) CCNA Security, CySA+, GICSP, GSEC, Security+CE, CND, or SSCP
SECRET clearance.

Responsibilities

Perform system hardening in accordance with applicable DoD and Navy cybersecurity requirements.
Conduct DoD-mandated vulnerability assessments using ACAS.
Conduct SCAP scans and automated STIG compliance checks.
Implement and assess applicable DISA STIG requirements.
Review quarterly STIG releases and assess system and operational impacts.
Support ATO audits, Annual Security Reviews, and continuous monitoring activities.
Analyze ACAS, SCAP, and STIG findings and develop or update POA&M entries.
Track cybersecurity vulnerabilities and remediation activities through closure.
Remediate vulnerability findings, including implementation of vendor patches on Linux and Windows operating systems.
Apply Security Management policy guidance and directives to cybersecurity activities.
Support day-to-day cybersecurity operations and maintenance of network, server, and hardware resources.
Coordinate with technical and cybersecurity stakeholders to address compliance findings and maintain system security posture.