Cybersecurity Engineer - Cyber Defense Operations, Isse
$140k - $170k
Mid
Bachelor's
Charlottesville, VA, USA
In PersonOnsite at NGIC in Charlottesville, Virginia; candidates willing to relocate to the Charlottesville area are encouraged to apply.
CybersecuritySecurity Engineering & Architecture
No H1B Sponsorship
US Citizenship, US Top Secret Clearance Required
About the job
Requirements
- A Bachelor of Science degree in Engineering, Computer Science, or a related field is required; experience may be substituted for the degree.
- A TS/SCI clearance is required.
- A DoD 8140 (8570) IAT Level II certification is required.
- At least four years of hands-on cybersecurity engineering experience, preferably supporting DoD or Intelligence Community environments.
- Strong knowledge of cybersecurity engineering principles and DoD cybersecurity requirements, and the ability to translate requirements into practical technical solutions.
- Experience assessing system architectures and technical implementations and providing cybersecurity guidance to architects, engineers, administrators, and system owners.
- Hands-on experience with vulnerability management, system hardening, DISA Security Technical Implementation Guides (STIGs), Security Content Automation Protocol (SCAP), ACAS, Tenable/Nessus, and remediation of technical findings.
- Strong working knowledge of Windows and Linux systems, networking, authentication, access controls, and enterprise security technologies.
- Experience implementing, assessing, and validating security controls across systems, applications, networks, and enterprise environments.
- Practical knowledge of the Risk Management Framework (RMF), Continuous Monitoring, NIST Special Publication 800-53, eMASS, Plans of Action and Milestones (POA&Ms), System Security Plans (SSPs), and Authorization to Operate (ATO) processes.
- Ability to independently analyze complex cybersecurity problems, develop effective technical solutions, and clearly communicate risks and recommendations to technical teams and leadership.
- Hired employees are expected to have experience with Microsoft Copilot and/or an approved equivalent AI solution.
Responsibilities
- Serve as a hands-on cybersecurity technical authority, providing guidance and solving complex security challenges across DoD systems, applications, networks, and enterprise environments.
- Advise architects, system owners, engineers, administrators, and cybersecurity personnel on security requirements, system design, technical risk, and secure implementation.
- Assess system architectures, configurations, technologies, and proposed solutions to identify vulnerabilities, security risks, and appropriate mitigation strategies.
- Perform vulnerability assessment and remediation using ACAS, Tenable/Nessus, security information and event management (SIEM), and other cybersecurity tools.
- Apply, validate, and troubleshoot DISA STIGs, SCAP benchmarks, security controls, configuration baselines, and system-hardening requirements.
- Support incident response, Continuous Monitoring (ConMon), vulnerability management, and ongoing assessment of system security posture.
- Implement and validate cybersecurity controls across operating systems, applications, networks, endpoints, and enterprise infrastructure.
- Identify opportunities to automate security assessments, vulnerability management, configuration validation, control testing, and other cybersecurity processes.
- Evaluate emerging technologies, modernization efforts, and architectural changes to identify cybersecurity requirements, technical risks, and secure implementation approaches.
- Provide cybersecurity engineering guidance for initiatives including Zero Trust, Identity, Credential, and Access Management (ICAM), cloud, DevSecOps, data-centric security, software supply chain security, security automation, and Artificial Intelligence (AI).
- Provide technical expertise supporting RMF, ATO, and continuous authorization, including SSPs, POA&Ms, eMASS, security controls, risk assessments, and supporting technical evidence.
- Communicate complex cybersecurity risks, technical findings, remediation strategies, and security posture to technical teams, system owners, mission stakeholders, and leadership.
Desired Qualifications
- A CISSP, CGRC/CAP, CISM, CASP+/SecurityX, CySA+, CEH, or other relevant advanced cybersecurity certification.
- Experience with SIEM, endpoint security, intrusion detection and prevention systems (IDS/IPS), firewalls, incident response, or defensive cyber operations.
- Experience with Zero Trust, ICAM, cloud security, DevSecOps, data-centric security, continuous authorization, or software supply chain security.
- Experience evaluating AI/ML technologies and providing cybersecurity guidance for their secure integration into enterprise environments.
- Experience with PowerShell, Python, Ansible, APIs, or other scripting and security automation technologies.
- Experience integrating cybersecurity requirements into system architecture, modernization, emerging technologies, and technology refresh efforts.
About the company
DSA provides mission-essential solutions for Defense and Federal Government customers, including Systems Engineering and Integration, Software Development, Data Analytics, Cyber Operations and Security, Systems Modernization, Cloud Solutions, Enterprise Collaboration and Knowledge Management, and Critical Infrastructure Intelligence Systems. It delivers end-to-end programs that combine engineering, development, security, cloud, collaboration, and analytics to meet sensitive government requirements. The company differentiates itself through employee ownership, a long history since 1963, and formal compliance and process standards such as ISO 9001:2015, ISO/IEC 27001:2013, and CMMI Level 3. Its goal is to provide trusted, secure, and dependable capabilities to DoD, Civil agencies, universities, and private sector partners across the United States, supporting mission-critical operations across 60+ locations.
Company Size
1,001-5,000
Company Stage
N/A
Total Funding
N/A
Headquarters
Pennsylvania
Founded
1963
Get referred to Data Systems Analysts
See people who can refer or advise you
Simplify's Take
What believers are saying
- May 2026 eCAP and March 2026 ERDS awards extend revenue visibility into 2028.
- CMMC Level 2 C3PAO certification in December 2025 strengthens access to defense deals.
- Joseph Bartasius drives captures across Defense, Federal Civilian, Intel, and CIP markets.
What critics are saying
- A September 2025 network breach exposed personal information and invites follow-on claims.
- The 2026 CEO transition concentrates execution risk during active growth and portfolio change.
- Federal contract dependence leaves DSA vulnerable if Army recompetes, cuts scope, or delays options.
What makes Data Systems Analysts unique
- DSA is 100% employee-owned, aligning execution with customer retention and employee loyalty.
- Its 2026 leadership adds John Foley, Robert Wheeler, and mission-specific vice presidents.
- DSA won a $193 million, five-year Army eCAP task order in May 2026.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Remote Work Options
- Professional Development Budget