Cybersecurity Engineer

Graham Technologies • Norfolk, VA

1d • Onsite

About The Position

Graham Technologies is seeking a Cybersecurity Engineer to support cybersecurity operations within a secure cloud environment. This role focuses on securing cloud systems, ensuring compliance with established security frameworks, and maintaining the overall security posture of mission-critical systems. This position is ideal for experienced cybersecurity professionals with strong cloud security, compliance, and risk management expertise supporting highly regulated environments.

Requirements

• 5-7+ years of cybersecurity or information assurance experience
• Experience across multiple domains (network, cloud, application security)
• Hands-on experience with AWS cloud environments (IL6 preferred)
• Hands-on experience with vulnerability management and patching processes
• Hands-on experience with security monitoring and incident response
• Hands-on experience with RMF, ATO, and continuous monitoring
• Bachelor's degree in Cybersecurity, Information Technology, or related field (or equivalent experience)
• Active Top Secret clearance with SCI eligibility required
• One or more of: Security+, GSEC, CEH, CISSP certifications
• Experience with ACAS, HBSS/Trellix, SIEM tools (e.g., Splunk)
• Experience with eMASS and RMF documentation systems
• Strong knowledge of NIST 800-53, RMF, and DoD cybersecurity frameworks
• Strong knowledge of DISA STIG implementation and compliance
• Strong knowledge of Cloud security principles (AWS)
• Ability to analyze security data and respond to incidents
• Strong documentation and communication skills

Nice To Haves

• Experience supporting Navy or DoD cybersecurity programs
• Experience in AWS IL6 or classified cloud environments
• Master's degree in Cybersecurity or related discipline
• TS/SCI with CI Polygraph clearance
• AWS Security or Cloud certifications
• Additional GIAC certifications
• Knowledge of Zero Trust architecture implementation
• Knowledge of DevSecOps and secure CI/CD pipelines
• Knowledge of Security automation and compliance tooling

Responsibilities

• Implement and maintain cybersecurity controls to ensure system confidentiality, integrity, and availability
• Apply and enforce DISA STIGs, RMF controls, and DoN cybersecurity requirements
• Monitor security logs, alerts, and events to detect and respond to threats
• Conduct vulnerability assessments, analyze findings, and coordinate remediation efforts
• Support Authority to Operate (ATO) processes, including documentation in eMASS
• Develop and maintain cybersecurity policies, SOPs, and compliance documentation
• Perform incident response activities, including investigation, containment, and reporting
• Implement and manage security tools (e.g., ACAS, SIEM platforms such as Splunk)
• Conduct risk assessments and develop mitigation strategies
• Support continuous monitoring and auditing activities aligned with NIST and RMF frameworks
• Maintain system configuration baselines and ensure compliance with security standards
• Develop and test disaster recovery and business continuity plans
• Collaborate with cloud engineers and system administrators to secure AWS environments

Benefits

• Four Weeks of Accrued PTO in the First Year
• Eleven Paid Federal Holidays
• Comprehensive Health, Dental, Vision, and Life Insurance
• 401(k) Plan with Annual Employer Contributions
• Flexible Schedules
• Reimbursement for Continued Education and Training

What This Job Offers

• Job Type: Full-time
• Career Level: Senior