Cybersecurity Engineer III (InSITE) - Secret Clearance

V2X•Orlando, FL

5d•Onsite

About The Position

V2X is seeking an experienced Cybersecurity Engineer to serve as the senior/lead cybersecurity engineer for the InSITE application within the WTRS program. This role provides technical leadership for cybersecurity activities, including program planning, static and dynamic application security testing, penetration testing, monthly vulnerability assessments, quarterly STIG reviews, and RMF/ATO and continuous monitoring. The Cybersecurity Engineer III is responsible for driving the overall security posture of the InSITE solution across Dev, Test, and Production environments.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field; or equivalent experience.
6+ years of progressive experience in cybersecurity or system security engineering.
Proven experience leading application security assessments (SAST/DAST, vulnerability scans) for complex systems.
Proven experience leading DISA STIG/SRG-based hardening for servers, applications, and databases.
Proven experience leading RMF/ATO efforts and continuous monitoring for government/regulated systems.
Proven experience leading penetration testing (hands-on or through oversight of specialized teams).
Expert knowledge of application security, OWASP Top 10, and secure SDLC practices.
Strong experience with vulnerability management across Dev/Test/Prod and with Windows Server, IIS, SQL/Azure SQL, and cloud-hosted environments.
Hands-on experience with enterprise vulnerability tools (e.g., Tenable/Nessus, Qualys).
Hands-on experience with application security tools (e.g., SonarQube, Fortify, Veracode, Burp Suite, OWASP ZAP).
Hands-on experience with DISA STIGs, DoD SRGs, and their implementation in production environments.
Solid understanding of NIST SP 800-53, NIST RMF, and ATO/continuous monitoring requirements.
Demonstrated leadership in leading cross-functional security initiatives and remediation.
Demonstrated leadership in mentoring junior and mid-level engineers.
Demonstrated leadership in collaborating effectively with managers, customers, and stakeholders.
Excellent written and verbal communication skills for technical reporting and presenting complex security issues to varied audiences.
Strong analytical and decision-making skills, balancing mission needs, risk, and compliance.
Ability to obtain and maintain a Secret security clearance for the WTRS program.
U.S Citizenship

Nice To Haves

Azure cloud security preferred.
DoD 8570/8140 compliant certification at IAT III or IASAE level (e.g., CISSP, CASP+, CSSLP, or similar) strongly preferred.
Offensive or advanced security certifications (e.g., OSCP, OSWE, GPEN, GCIH) highly desirable.

Responsibilities

Serve as the primary cybersecurity lead for the InSITE/WTRS program and main point of contact for program management, engineering, and customer stakeholders.
Drive cybersecurity planning, schedules, and resource estimates; represent cybersecurity in design reviews, TIMs, and Agile events.
Define and manage the integrated security assessment strategy (SAST, DAST, penetration testing, vulnerability assessments, STIG/SRG compliance) aligned with RMF and ATO requirements.
Lead application security testing: Oversee static code analysis and web application vulnerability scanning. Interpret findings, assess risk, and guide remediation.
Lead vulnerability management and continuous monitoring across Dev/Test/Prod: Direct monthly scanning and analysis of servers and infrastructure. Prioritize vulnerabilities, coordinate remediation, and refine monitoring, metrics, and reporting.
Lead quarterly STIG/SRG assessments and system hardening for Windows Server, IIS, .NET, Azure SQL, and related technologies: Maintain accurate STIG documentation and drive remediation and risk acceptance.
Plan and lead penetration tests: Develop test plans and rules of engagement. Coordinate execution and produce/review reports with clear risk and mitigation guidance.
Own RMF/ATO and continuous monitoring for InSITE: Lead Security Authorization Package development and submission. Oversee control implementation, assessment, POA&M management, and ongoing risk activities. Ensure scans, log reviews, and configuration checks are executed and documented.
Mentor Cybersecurity Engineers I and II; promote secure design, coding, and operations.
Produce and review formal security deliverables (vulnerability and pen test reports, ATO documentation, STIG packages) and present findings to leadership and customers.
Identify and drive process and tool improvements, including automation and CI/CD integration.
Perform other duties as assigned.