Cybersecurity Engineer – Cyber Defense Operations (ISSE)

Data Systems Analysts•Charlottesville, VA

21h•Onsite

About The Position

Data Systems Analysts, Inc. (DSA) is seeking a TS/SCI-cleared Cybersecurity Analyst / Engineer to support the security posture, compliance, and accreditation of enterprise systems in a secure DoD environment. The role supports cybersecurity readiness, Risk Management Framework (RMF) processes, and the confidentiality, integrity, and availability of mission-critical systems. The selected candidate will collaborate with technical and compliance teams on vulnerability remediation, security control implementation, RMF documentation, and authorization sustainment. This is a hands-on cybersecurity engineering role serving as a technical authority across DoD systems, applications, networks, and enterprise environments. The engineer advises technical and mission stakeholders, assesses architectures and configurations, supports vulnerability management and incident response, implements and validates security controls, and provides technical expertise for RMF, ATO, and continuous authorization. The role also supports cybersecurity initiatives involving Zero Trust, ICAM, cloud, DevSecOps, AI, automation, and other emerging technologies. The position is onsite at the National Ground Intelligence Center (NGIC) in Charlottesville, Virginia. Candidates willing to relocate to the Charlottesville area are encouraged to apply. All hired employees are expected to have experience with Microsoft Copilot and/or an approved equivalent AI solution.

Requirements

Bachelor of Science degree in Engineering, Computer Science, or a related field; experience may be substituted for the degree.
TS/SCI clearance.
DoD 8140 (8570) IAT Level II certification.
At least 4 years of hands-on cybersecurity engineering experience, preferably supporting DoD or Intelligence Community environments.
Strong knowledge of cybersecurity engineering principles and DoD cybersecurity requirements, including the ability to translate requirements into practical technical solutions.
Experience assessing system architectures and technical implementations and providing cybersecurity guidance to architects, engineers, administrators, and system owners.
Hands-on experience with vulnerability management, system hardening, DISA STIGs, SCAP, ACAS, Tenable/Nessus, and remediation of technical findings.
Strong working knowledge of Windows and Linux systems, networking, authentication, access controls, and enterprise security technologies.
Experience implementing, assessing, and validating security controls across systems, applications, networks, and enterprise environments.
Practical knowledge of RMF, Continuous Monitoring, NIST SP 800-53, eMASS, POA&Ms, SSPs, and ATO processes.
Ability to independently analyze complex cybersecurity problems, develop effective technical solutions, and clearly communicate risks and recommendations to technical teams and leadership.
Experience with Microsoft Copilot and/or an approved equivalent AI solution is expected of all hired employees.

Nice To Haves

CISSP, CGRC/CAP, CISM, CASP+/SecurityX, CySA+, CEH, or another relevant advanced cybersecurity certification.
Experience with SIEM, endpoint security, IDS/IPS, firewalls, incident response, or defensive cyber operations.
Experience with Zero Trust, ICAM, cloud security, DevSecOps, data-centric security, continuous authorization, or software supply chain security.
Experience evaluating AI/ML technologies and providing cybersecurity guidance for their secure integration into enterprise environments.
Experience with PowerShell, Python, Ansible, APIs, or other scripting and security automation technologies.
Experience integrating cybersecurity requirements into system architecture, modernization, emerging technologies, and technology refresh efforts.

Responsibilities

Serve as a hands-on cybersecurity technical authority, providing guidance and resolving complex security challenges across DoD systems, applications, networks, and enterprise environments.
Advise architects, system owners, engineers, administrators, and cybersecurity personnel on security requirements, system design, technical risk, and secure implementation.
Assess system architectures, configurations, technologies, and proposed solutions to identify vulnerabilities, security risks, and mitigation strategies.
Perform vulnerability assessment and remediation using ACAS, Tenable/Nessus, SIEM, and other cybersecurity tools.
Apply, validate, and troubleshoot DISA STIGs, SCAP benchmarks, security controls, configuration baselines, and system-hardening requirements.
Support incident response, Continuous Monitoring (ConMon), vulnerability management, and ongoing assessment of system security posture.
Implement and validate cybersecurity controls across operating systems, applications, networks, endpoints, and enterprise infrastructure.
Identify opportunities to automate security assessments, vulnerability management, configuration validation, control testing, and other cybersecurity processes.
Evaluate emerging technologies, modernization efforts, and architectural changes to identify cybersecurity requirements, technical risks, and secure implementation approaches.
Provide cybersecurity engineering guidance for Zero Trust, ICAM, cloud, DevSecOps, data-centric security, software supply chain security, security automation, and AI initiatives.
Support RMF, ATO, and continuous authorization with technical expertise, including SSPs, POA&Ms, eMASS, security controls, risk assessments, and supporting technical evidence.
Communicate cybersecurity risks, technical findings, remediation strategies, and security posture to technical teams, system owners, mission stakeholders, and leadership.