1784 - Network Security Engineer III

Sigma Defense • San Diego, CA

9d

About The Position

Sigma Defense is seeking a Network Security Engineer III to support enforcement of DoD cybersecurity policies—including STIGs, RMF, and NIST SP 800-53—across CANES environments. The role involves hands-on system hardening, vulnerability management, and configuration automation using GitLab, GitHub, and Spork/Spork+. The engineer will work with security and systems platforms including ACAS, Trellix ESS, NetIQ Sentinel, and Splunk, and support CANES system validation, assessments, and installations. The position is based in San Diego, California.

Requirements

• 5–10 years of experience.
• Must be a U.S. citizen.
• Security+ CE or CISSP certification.
• At least one operating system or platform certification in Linux, Windows, VMware, or Cisco.
• Must possess or be able to obtain an active Secret security clearance or higher.
• Bachelor’s degree from an accredited college or university.
• Experience with the listed computer programs/software: ACAS, Trellix ESS, Spork/Spork+, and NetIQ SIEM Sentinel.

Nice To Haves

• RHEL administration expertise, ideally with RHEL 7 or newer.
• Windows administration expertise, including Windows Server 2019/2020 through 2025 or newer.
• SIEM/SOAR experience; Sentinel and Splunk experience are preferred.
• ACAS engineering experience rather than user-only experience.
• Trellix ESS engineering experience rather than administrator-only experience.

Responsibilities

• Implement and enforce DoD cybersecurity policies, including STIGs, RMF, and NIST SP 800-53, across CANES systems.
• Design, develop, implement, and troubleshoot solutions for vulnerabilities within the CANES system.
• Lead hardening efforts for Windows and Linux systems, applications, network devices, and other hardware in the CANES environment.
• Assist with IAVM compliance, log analysis, and audit readiness tasks.
• Perform patch management, system scanning, and incident response coordination.
• Maintain system documentation, cybersecurity artifacts, and baseline reports.
• Support system validation during test events, site assessments, and production installations.
• Design, develop, and automate configurations across relevant operating system, SIEM/SOAR, ACAS, and Trellix ESS platforms.
• Submit configuration updates through GitLab, GitHub, and Spork/Spork+.

Benefits

• Dental and vision insurance.
• Medical insurance, including HSA, FSA, and DFSA plans.
• Life and AD&D coverage.
• Employee Assistance Program (EAP).
• 401(k) plan with company matching contributions.
• 160 hours of paid time off (PTO).
• 12 floating holidays.
• Educational assistance.
• Highly competitive salary.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level