Senior Systems Security Engineer #1643464

Network Designs•Dahlgren, VA

51d•Onsite

About The Position

NDi is seeking an experienced Systems Security Engineer to lead enterprise-level cybersecurity operations and compliance for a large federal IT program. The Systems Security Engineer will perform advanced cybersecurity functions including vulnerability and risk analysis, security scanning, DISA STIG implementation, and system accreditation. The role also involves conducting and leading TEMPEST testing in accordance with the National TEMPEST Standard.

Requirements

U.S Citizenship required.
Active Top Secret Clearance required.
This position requires 5 days onsite in Dahlgren, VA. Please note that up to 40% remote work may become available but this determination will be made at a later stage.
Six (6) years of professional experience in IT security within the DoD or Navy.
Vulnerability and risk analysis, SCAP scanning, DISA STIG implementation, and identifying/remediating threats such as viruses or malicious software.
Qualified experience in system accreditation, audits, and RMF documentation.
Conducting and leading TEMPEST testing using approved test plans, production test procedures, and the current National TEMPEST Standard.
Certifications (DoD 8570/8140 IAT Level III), minimum of one: CASP+ CE, CCNP Security, CISA, CISSP (Associate or Full), GCED, GCIH, CySA+ CE, CCSP, PenTest+ CE, or GSE.
Strong understanding of DoD cybersecurity frameworks, policies, and risk management practices.
Demonstrated experience performing security hardening and compliance validation on classified systems.
Expertise in vulnerability management, RMF processes, and cybersecurity compliance.
Proficiency with SCAP tools, ACAS, and STIG Viewer.
In-depth knowledge of network defense concepts, intrusion detection, and mitigation.
Experience performing and documenting TEMPEST evaluations and findings.
Strong communication skills with the ability to produce accreditation packages and audit reports.

Nice To Haves

Bachelor's degree in an Engineering discipline.

Responsibilities

Perform and document vulnerability scans, risk assessments, and mitigation actions.
Apply DISA STIGs and security baselines to ensure system compliance across classified environments.
Lead the accreditation and audit processes under the Risk Management Framework (RMF).
Maintain documentation of security posture, findings, and corrective actions.
Conduct TEMPEST testing using approved test procedures and standards.
Analyze test results, document deficiencies, and support corrective action development.
Provide technical input to improve testing processes and ensure adherence to the National TEMPEST Standard.
Support continuous monitoring and incident response activities.
Collaborate with network and system administrators to maintain a secure configuration baseline.
Provide subject-matter expertise on cybersecurity requirements and best practices.