Senior Levels

NV5•Saint Louis, MO

17h•Hybrid

About The Position

Geospatial Cyber Security Engineers are needed to support national security client sites in the Northern Virginia and St. Louis, MO areas. The role involves supporting critical DoW and Intel missions and programs by focusing on cybersecurity engineering, risk management, and compliance across cloud and on-prem systems. This includes supporting system authorization, vulnerability management, and secure operations in classified environments. A Top Secret Clearance with SCI eligibility or an active TS/SCI is required.

Requirements

US citizenship with Active or Current (within two years of active) Top Secret Security Clearance with SCI eligibility
Bachelor’s degree in Computer Science, Engineering, DevOps, or related technical field
5+ years of relevant experience
DoD 8570 IAT Level II or higher certification (e.g., Security+, CySA+, CISSP)
Experience with RM, A&A, POA&M, and ATO documentation (XACTA/eMASS)
Hands-on vulnerability scanning and compliance tracking (ACAS, IAVM)
Experience securing Linux and Windows systems, STIGs, patching, and system hardening
Knowledge of NIST 800-series publications and incident response processes
Strong analytical, communication, and collaborative skills

Nice To Haves

Scripting or development experience (Python, Java, React)
DevSecOps tools and pipeline experience
Experience with Linux (RedHat/CentOS), database, web apps, or big data platforms
Familiarity with Agile environments and tools (Jira, Confluence)
Experience with NIST SP 800-171 and Systems Security Engineering (SSE)

Responsibilities

Applying RMF processes to support system Assessment & Authorization (A&A), including control selection, implementation, assessment, and continuous monitoring
Developing, reviewing, and maintain security documentation such as SSPs, POA&Ms, SARs, and ATO artifacts in tools such as XACTA or eMASS
Conducting vulnerability assessments and compliance scans (e.g., ACAS) and tracking remediation of findings and IAVM requirements
Implementing and validating security controls aligned with NIST 800-53, CNSSI 1253, and related DOD guidance
Supporting system hardening, patching, and configuration management in compliance with STIGs for Linux, Windows, and network devices
Monitoring systems for security events and supporting incident response and risk mitigation activities
Assessing security impacts of system changes and supporting configuration control boards (CCBs)
Collaborating with systems engineers, administrators, and DevSecOps teams to integrate security throughput the system lifecycle
Providing cybersecurity risk input to program leadership, Authorizing Officials (AOs) and stakeholders