DISA STIGs

DISA STIGs Cybersecurity Jobs

10 jobs found

Today

Information Security Analyst (Journeyman)

Castalia Systems Ford Island, HI

Ford Island, HI

Today

$116k - $125k/yr Full time Cybersecurity Tools DISA STIGs Enterprise Risk

Apply Now

Job Description

This information security analyst position supports the US Battlefield Information Collection and Exploitation System eXtended (US BICES-X) program in Hawaii, onsite at Ford Island. The role aids DoD intelligence information sharing on current and emerging global threats and assists government leaders and mission partners in making cyber risk decisions.

Responsibilities

Lead cybersecurity activities for a large program and collaborate with government program staff, USAF, and other agencies to help create, disseminate, govern, and audit program policy, standards, and operating procedures.
Leverage available resources to execute cybersecurity tasks and report to senior and government personnel on the program's overall security posture.
Perform network and system audits for vulnerabilities using Security Technical Implementation Guides (STIGs), the ACAS vulnerability scanner, and DISA SCAP to mitigate findings across Linux, Windows, and related operating systems.
Develop, track, and review Plan of Action and Milestones (POA&Ms) and identify solutions to support remediation and resolution efforts.
Communicate tactical and strategic threat information to government leaders, Cybersecurity Operations, and A&A staff to inform cyber risk decisions and threat mitigation.
Execute DoD Risk Management Framework (RMF) activities in alignment with DoD 8510 guidelines, including security control validation and coordinated security testing.
Maintain Security Authorization status and document multiple DoD classified networks and interconnected systems.
Coordinate with OUSDI, USAF, DISA, USN, and other organizations to support audits and inspections, supplying required documentation for SAVs, ST&Es, and CCRI.
Assess firewall change requests and determine associated organizational risk.
Conduct Security Impact Analysis consistent with organizational requirements.
Issue alerts to agencies regarding intrusions or compromises affecting networks, applications, and operating systems.
Support implementation of countermeasures or mitigating controls as needed.
Ensure the integrity and protection of networks, systems, and applications by enforcing security policies and monitoring vulnerability scanning tools.
Perform periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, and file system integrity checks to verify compliance.
Provide guidance and leadership to less experienced technical staff and stay current with relevant technologies.
Participate in special projects as required to further program objectives.

Requirements

Minimum of 5 years of experience in a similar role.
BA/BS or an equivalent combination of education, technical training, or relevant work or military experience.
IAM Level II certification, such as CISSP, CASP, CISM, GSLC, or CCIS.
Active Top Secret/SCI security clearance (must be maintained).
Additional certifications may be required depending on the specific assignment.
Ability to collaborate effectively in a team-oriented environment.
Familiarity with network concepts, user authentication, and digital signatures.
Understanding of DoD RMF (NIST 800-53 Rev 4 and Rev 5).
Knowledge of DoD policies and procedures, including FIPS 199, FIPS 200, NIST 800-53, and related policies.

Technologies

STIGs
ACAS vulnerability scanner
DISA SCAP

Benefits

Medical, dental, and vision coverage
401(k) matching
Generous paid time off
Paid holidays
Professional training opportunities
Pet insurance

Desired Qualifications

Capacity to manage multiple projects and tasks simultaneously in a dynamic, fast-paced team setting.
Knowledge of ServiceNow for ticketing, reporting, and dashboards.

Physical Requirements / Work Environment

The role is typically performed in an office setting with standard safety practices; some physical effort may be required to handle light materials, boxes, or equipment.

Travel

Less than 5 percent.

Company Description

Castalia Systems is a proven partner delivering mission critical solutions to the Federal Government. The company offers advanced capabilities spanning data security, systems engineering, and development, and is a leader in artificial intelligence design and application. By applying deep knowledge of customer needs and current technology, Castalia Systems delivers tailored solutions that support critical missions. The organization emphasizes opportunities and wellbeing, with benefits including medical, dental, vision coverage, 401(k) matching, generous PTO, paid holidays, professional training, and pet insurance. Regularly scheduled staff working at least 30 hours per week are eligible for the company’s benefit programs.

View full job page →

2d ago

Network Security Engineer III (MUST HAVE SECRET CLEARANCE)

DirectViz Solutions, LLC Virginia Beach, VA

Virginia Beach, VA

2d ago

Full time Senior Cisco Cybersecurity Tools

Apply Now

Job Description

DirectViz Solutions, LLC is seeking a Network Security Engineer III to design, implement, and sustain secure, DoD-compliant enterprise networks. The role centers on vulnerability management, Cisco technologies, and STIG compliance, and requires an active Secret clearance. This onsite position in Virginia Beach, VA calls for a candidate with eight years of relevant experience and a bachelor’s degree in cybersecurity or a closely related field.

Overview

We are looking for a motivated and detail-oriented Network Security Engineer III to support secure enterprise network environments in alignment with DoD cybersecurity and network security standards. The ideal candidate will bring hands-on experience in network engineering, cybersecurity best practices, vulnerability management, and Cisco networking technologies within classified or government settings. An active Secret clearance is required.

Responsibilities

Support the design, configuration, implementation, and ongoing maintenance of secure network infrastructure.
Configure and maintain Cisco networking devices, including routers, switches, and related technologies.
Perform network hardening activities in accordance with DoD cybersecurity requirements and Security Technical Implementation Guides (STIGs).
Conduct vulnerability assessments using Assured Compliance Assessment Solution (ACAS) and assist with remediation efforts.
Troubleshoot network connectivity, routing, switching, and performance issues across enterprise environments.
Utilize packet analysis and monitoring tools such as Wireshark and tcpdump to diagnose and resolve network problems.
Assist with implementing security controls and maintaining compliance with DoD cybersecurity policies and procedures.
Support system accreditation and continuous monitoring activities as required.
Maintain documentation related to network configurations, security findings, remediation activities, and operational procedures.
Collaborate with cybersecurity, systems engineering, and operations teams to ensure secure and reliable network services.

Requirements

Bachelor’s degree in Cybersecurity, Cyber Operations, Cyber Engineering, Information Systems, Information Technology, Computer, Electrical or Electronics Engineering, Software Engineering, Computer Science, Mathematics with a concentration in Computer Science, or equivalent to above disciplines.
At least one of the following certifications: CASP+ CE, CCNP Security, CISA, CISSP, GCED, GCIH, or CCSP.
Active Secret clearance.
Eight years of combined full-time professional experience in Network Security, including design, implementation, configuration, and enforcement of security controls on network hardware and software components; STIG implementation; configuring and utilizing Active Directory.
Experience performing vulnerability assessments with ACAS.
Proficiency configuring Cisco networking devices and using packet analyzer tools (e.g., Wireshark, tcpdump).
Experience implementing and managing firewalls and IDS/IPS solutions.

Technologies

ACAS (Assured Compliance Assessment Solution)
Wireshark
tcpdump
Active Directory
Security Technical Implementation Guides (STIGs)
Cisco networking devices

Benefits

Competitive compensation
Comprehensive medical benefits
401(k) match
Generous PTO accrual
Professional development reimbursement
Corporate-funded technology certifications
Employee recognition and appreciation programs

Physical and Mental Qualifications

Maintain focus and awareness during scheduled working hours
Perform tasks requiring prolonged sitting or standing at a desk with a computer, mouse, and keyboard
Lift and move objects weighing up to 15 pounds as needed
Excellent verbal and written communication skills in English
Ability to work independently and collaboratively within a team
Ability to quickly learn and retain routine tasks and processes
Strong organizational skills, attention to detail, and self-management capabilities
Reasonable accommodations available for disabilities upon request
Willingness to take on additional responsibilities or changes to duties as directed by DirectViz Solutions

View full job page →

8d ago

IT Specialist (INFOSEC)

US Defense Contract Management Agency Carson, CA

Carson, CA

8d ago

$124k - $161k/yr Full time Cybersecurity Tools DISA STIGs Information Security

Apply Now

Job Description

At the Defense Contract Management Agency, the IT Specialist (INFOSEC) operates at the intersection of policy, defense IT, and risk management. In this role, you will assume the responsibilities of an Information Systems Security Manager (ISSM), providing cybersecurity guidance and oversight for DoD information systems across the development lifecycle. You’ll serve as a principal technical advisor on all matters related to an information system’s cybersecurity and help establish a multi-tiered RMF-based risk management process to safeguard information and assets.

Overview

Location options include Carson, CA; Smyrna, GA; and Fort Lee, VA. Salary ranges from $111,183 to $161,313 per year, at the GS-13 pay scale. The position is full-time and permanent, with travel expected at up to 25% or less. Telework is eligible as determined by agency policy; this is a on-site role with a Secret security clearance requirement.

Responsibilities

Serve as an Information Systems Security Manager (ISSM).
Provide guidance to Information System Owners (ISO) and Program/System Managers (PM/SM).
Evaluate and provide cybersecurity guidance and assessment on system development lifecycle efforts.
Act as the principal advisor on all technical and non-technical matters involving cybersecurity of an information system.
Establish guidance and implement a multi-tiered cybersecurity risk management process to protect information and systems.
Advise the Security Control Assessor and Chief Information Security Officer (CISO) on the adequacy of RMF controls within each RMF Package.
Serve as Subject Matter Expert and provide direct customer support throughout the assessment and authorization process of the RMF.

Requirements

Must be a U.S. citizen.
Security clearance: Non-Critical Sensitive with Secret Access.
Appointment is subject to a favorable suitability or fitness determination; unfavorably adjudicated background checks are disqualifying.
Selective Service: Males born after 12-31-1959 must be registered or exempt.
Drug testing: Selectees may start before drug test results are finalized; a negative result must be confirmed within 30 days of the start date.
A. Specialized Experience: One year of specialized experience relevant to the duties of the position.
GS-13 qualification requires one year of specialized experience equivalent to GS-12 or equivalent in other pay systems.
Creditable specialized experience includes: understanding RMF and GRC tools (e.g., eMASS); familiarity with security audits, STIGs, vulnerabilities, and remediation; evaluating and implementing security controls in complex environments; in-depth knowledge of DoD cybersecurity regulations and policies.
IT-related experience must demonstrate the four competencies: Attention to Detail, Customer Service, Oral Communication, and Problem Solving.
Substitution of education may not be used in lieu of specialized experience for this grade level.

Technologies

Enterprise Mission Assurance Support Service (eMASS)
Risk Management Framework (RMF)
Security Technical Implementation Guides (STIGs)
Governance, Risk and Compliance (GRC) tools

Benefits

Comprehensive benefits package.

Open To

The public: U.S. Citizens, Nationals or those who owe allegiance to the U.S.
Military spouses: Spouses of active duty service members or those with certain disabilities or death related to active duty.
Clarification: This vacancy is open to All U.S. Citizens and is being filled under Direct Hire Authority (DHA) for Certain Personnel of the Department of Defense.

Education

Substitution of education may not be used in lieu of specialized experience for this grade level.

Additional Information

This position does not meet criteria for appointment of Reemployed Annuitants.
Tour of Duty: Flexible
FLSA: Exempt
Bargaining Unit: No
Selectee may be required to serve a trial/probationary period.
Military spouses working remotely are exempt from in-person work under guidance from relevant memoranda.
Candidates should be committed to improving the efficiency of the Federal government and upholding applicable laws and the Constitution.

How to Apply

Complete the online questionnaire and submit the required documents by the stated deadline: 11:59 PM (EST) on 07/13/2026.
Begin your application by selecting Apply Online on USAJOBS and uploading your resume and supporting documents (resumes up to two pages are accepted).
You will receive an email confirmation once your application is received. If USA Hire assessments are required, you will be notified with a unique assessment link and deadline.
Access USA Hire using your USAJOBS login credentials and complete the assessments, with accommodations available if needed.
Assessment responses are generally reusable for one year for subsequent applications.
To check application status, log into USAJOBS and use the Application Status page for updates.
Some steps may require virus scans for uploaded documents; allow time for processing.
Additional resources and practice assessments are available through the USA Hire Applicant Resource Center.

View full job page →

12d ago

Cybersecurity Engineer - Early Career

Lockheed Martin Corporation Huntsville, AL

Huntsville, AL

12d ago

Full time Cybersecurity Tools DISA STIGs Early Career

Apply Now

Job Description

Lockheed Martin Corporation is seeking an Early Career Cybersecurity Engineer to support the THAAD program in Huntsville, Alabama. This onsite role focuses on applying cybersecurity to tactical products, collaborating with cross-functional teams across the system development lifecycle, and helping develop Cyber Plans while serving as the cyber representative for the program.

Responsibilities

Apply cybersecurity controls to tactical products and related systems.
Partner with systems engineering, software engineering, and product teams to ensure a secure design throughout the system development lifecycle.
Use an interdisciplinary, collaborative approach to plan, design, develop, validate, and verify cyber solutions across the lifecycle.
Serve as the cyber representative to non cyber teams, aiding requirements understanding, collaborative engagement, and identification and implementation of solutions.
Assist with the development of Cyber Plans and Procedures.

Requirements

Bachelor's degree in a STEM field or equivalent combination of education, training, and experience in a related technical field.
DoD 8570 IAT Level II or higher certification (e.g., Security+, GSEC) or ability to obtain within 30 days of hire.
Understanding of cybersecurity fundamentals.
Understanding of IT fundamentals.
US Citizenship is required; eligibility for a government security clearance.

Technologies

STIGS

Benefits

Competitive pay
Comprehensive benefits
Flexible schedules designed to help you thrive at work and beyond

Expression of Interest

By applying to this job, you express interest in this position and may be considered for other opportunities where similar skills and requirements have been identified as a match. If a potential match is identified, you may be contacted for this and future openings.

Ability to Work Remotely

Onsite full-time work; this position will be performed at a Lockheed Martin facility.

Work Schedules

Lockheed Martin offers a variety of alternate work schedules to provide flexibility. Schedules range from a standard 40-hour, five-day week to condensed arrangements with additional time away from the office, in addition to paid time off benefits.

Schedule for This Position

9x80 schedule with every other Friday off.

Security Clearance Statement

This position requires a government security clearance and US citizenship for consideration.

Clearance Level

Secret

Experience Level

Experienced Professional

Business Unit

SPACE

Relocation Available

Possible

Career Area

Cyber Security Engineering

Type

Full-Time

Shift

First

View full job page →

19d ago

Information Systems Security Officer, Classified Cybersecurity Senior

Lockheed Martin Corporation Courtland, AL

Courtland, AL

19d ago

Full time Manager Senior Classified Programs

Apply Now

Job Description

Mid-level Classified Cybersecurity Information Systems Security Officer (ISSO) supporting the CPS program in Courtland, AL, onsite.

Responsibilities

Manage day-to-day information system security operations, auditing the information system, hardware, and software implementations, and RMF package authorizations.
Perform technical administration of information systems in line with Lockheed Martin and customer security requirements, with a focus on RMF.
Monitor, analyze, and respond to network and security events to maintain situational awareness.
Document compliance actions with the ISSM and remediate non-compliance within the defined timeframes.
Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices.
Participate in internal and external security audits and inspections and conduct risk assessments.
Maintain records for workstations, software, servers, routers, firewalls, network switches, telephony equipment, and other assets across the information system lifecycle.
Evaluate proposed changes or additions to the information system and advise the ISSM on security relevance.
Maintain and document configuration management for security-relevant software, hardware, and firmware.
Assist in investigations of computer security violations and incidents, and report findings as needed.
Ensure appropriate protection and corrective actions are taken when incidents or vulnerabilities are identified.
Communicate, implement, and manage a formal Information Security / Information Systems Security Program with the ISSM and Program Security.

Requirements

Final transferable Secret security clearance.
DoD 8570 IAT Level II certification.
Hands on experience with industry standard Information Assurance tools.
Experience developing, reviewing, and maintaining RMF artifacts.
Experience with auditing and investigations of classified information systems.

Technologies

Splunk
Nessus
Tenable
ACAS
STIGViewer
SCAP Compliance Checker
eSTIG
Trellix ENS
Trellix DLP
Windows
Linux
RMF
NIST 800-53
DAAG/JSIG

Benefits

Competitive pay
Comprehensive benefits
Flexible schedules
Paid Time Off benefits

Security Clearance

This position requires a government security clearance; US citizenship is required for consideration.

Clearance Level

Secret

Other Important Information

Expression of Interest: By applying, you may be considered for other opportunities where similar skills and requirements apply.
Work Location: Onsite full-time at a Lockheed Martin facility.
Work Schedules: Alternate schedules are available, including options that condense standard hours and provide additional time away from the office.
Schedule for this Position: 9x80 every other Friday off.
Equal Opportunity: Lockheed Martin is an equal opportunity employer; candidates are considered regardless of legally protected characteristics.
Application Window: Closes in 90 days; applicants are encouraged to apply within 5–30 days of the posting date for optimal consideration.

View full job page →

25d ago

Information System Security Officer, Classified Cybersecurity

Lockheed Martin Cape Canaveral, FL

Cape Canaveral, FL

25d ago

Full time Manager Cybersecurity Tools DISA STIGs

Apply Now

Job Description

Competitive pay, comprehensive benefits, flexible schedules, and paid time off are core to Lockheed Martin Space. This onsite Information System Security Officer role supports the FBM program in Cape Canaveral, Florida, overseeing daily cybersecurity operations for classified and unclassified systems.

Responsibilities

Provide technical administration of an information system in line with Lockheed Martin and customer security requirements, primarily governed by RMF.
Monitor, analyze, and respond to network and security events.
Document compliance actions in the approved tracking system or develop a plan of actions and milestones with the ISSM to address non-compliance within the allotted time frame.
Ensure systems are operated, maintained, and disposed of per security policies and the security plan.
Operate and maintain ACAS laptops and servers using Tenable Security Center and Nessus security scanners.
Audit diverse isolated and networked systems using vulnerability scanning and STIG analysis tools.

Requirements

DoD Secret clearance with a current investigation within the last five years and the ability to obtain and maintain a Top Secret clearance.
Knowledge of system hardening through DISA Security Technical Implementation Guides (STIGs).
Familiarity with security scanning tools such as SCAP, Evaluate-STIG, and Tenable.
DoD 8570 IAT II Certification.
Experience in information system auditing.

Technologies

Risk Management Framework (RMF)
DISA Security Technical Implementation Guides (STIGs)
SCAP
Evaluate-STIG
Tenable Security Center
Nessus Security Scanner
ACAS
STIG analysis tools
Windows
Linux/Unix
Networking equipment
NIST SP 800-37 Risk Management Framework
NIST SP 800-53 Security and Privacy Controls
NIST SP 800-171 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations

Benefits

Competitive pay
Comprehensive benefits
Flexible schedules
Paid Time Off benefits

Details

Job ID: 731337BR
Date Posted: Jun. 03, 2026
Location: Cape Canaveral, FL (onsite)
Security Clearance: This position requires a government security clearance; US citizenship is required for consideration.
Clearance Level: Top Secret
Expression of Interest: By applying to this job, you are expressing interest in this position and could be considered for other opportunities where similar skills and requirements have been identified. If a match is identified you may be contacted for this and future openings.
Remote Work: Onsite Full-time; work performed at a designated Lockheed Martin facility
Work Schedule: 9x80 every other Friday off
Experience Level: Experienced Professional
Business Unit: SPACE
Relocation: No
Career Area: Cyber Security
Type: Full-Time
Shift: First

View full job page →

29d ago

IA Cybersecurity Reviewer

Peraton Fort Meade, MD

Fort Meade, MD

29d ago

$112k - $179k/yr Full time Cybersecurity Tools Data Security DISA STIGs

Apply Now

Job Description

An IA Cybersecurity Reviewer is sought to provide hands-on expertise for on-site DODIN cybersecurity reviews across CONUS, OCONUS, and mission-partner locations. Based at Fort Meade, MD, the role centers on Security Readiness Reviews, vulnerability assessments, and the preparation of authoritative reports. The position requires travel to diverse worldwide locations in support of Task Order guidelines.

Responsibilities

Provide expertise in the current version of the Vulnerability Scan Procedures Guide and any official communications delivered electronically or via meetings to conduct scans.
Carry out standard internal network scans from the premise router inward, ensuring coverage of all site-managed network spaces.
Perform technical Security Readiness Reviews (SRR).
Use the appropriate STIG/SRG frameworks and, where applicable, the correct automated script or tool for the technology being reviewed.
Conduct at least 8 mission sets per year.
Assess systems and networks within the environment to identify deviations from acceptable configurations, enclave policy, or local policy.
Assist in developing EXSUMs, briefings, and reports.
Develop and maintain cybersecurity vulnerability review, inspection, and audit SOPs, TTPs, checklists, and guides.
Prepare audit reports that identify technical and procedural findings and provide remediation recommendations.
Travel to worldwide locations in accordance with Task Order guidelines.

Requirements

Education and experience: 8 years with BS/BA; 6 years with MS/MA; 3 years with PhD.
Current DoD 8140 certifications (IAM Level II): CAP, CASP+, CISM, CISSP, GSLC, CCISO, HCISPP or comparable.
Current DoD 8140 certifications (IAT Level II): CySA+, Security+, CCNA, GICSP, CND, SSCP.
Cross-certified in multiple related technology areas to conduct reviews of network vulnerability scans, virtual infrastructure, cloud, and related domains.
Ability to analyze an organization's cyber defense policies and configurations and evaluate compliance with regulations and directives.
Senior reviewers must have at least 2 years of direct experience.
Ability to conduct reviews in the following areas:
- Boundary Security (firewalls, network device management, policies, boundary technology)
- Network Infrastructure (firewalls, routers, switches, NDM, policies)
- Domain Name System (DNS)
- Exchange Server
- Network Vulnerability Scan
- Traditional Security
- Releasable Review
- Virtual Infrastructure and Environments
- Cross Domain Solution (CDS) – Administrative and Limited Technical Review
- Endpoint Security Solutions
- Mobility (802.11, BES, other mobile technologies)
- Voice and Video over IP (VVOIP)
- Database (Oracle, SQL, or other databases)
- Windows Infrastructure
- UNIX Infrastructure
- Web Review (services, servers)
- Other Review (any technology not specifically listed using SRGs, STIGs, or best practices)
U.S. Citizenship required.
Must have a valid U.S. Passport.
Ability to support up to 70% travel to CONUS and OCONUS locations, per Task Order travel guidelines.
DoD TS/SCI clearance or the ability to obtain SCI.

Technologies

STIG, SRG
Oracle, SQL
Windows, UNIX
Exchange Server, DNS
Virtual Infrastructure
Cross Domain Solution (CDS)
Endpoint Security Solutions
Mobility (802.11, BES)
VVOIP
Web Server

Benefits

Medical
Dental
Vision
Life
Health savings account
Short/long term disability
Employee Assistance Program (EAP)
Parental leave
401(k)
PTO for vacation
Company paid holidays

Details

Target Salary Range: $112,000 - $179,000 per year. This range reflects typical compensation for the role and depends on factors including scope, responsibilities, experience, education, knowledge, skills, and geographic location, as well as contract considerations. Overtime, shift differential, and discretionary bonuses may apply where applicable.

Benefits Statement: Peraton offers eligible employees a comprehensive benefits package including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), PTO, and company paid holidays. A full benefits listing is available at https://www.careers.peraton.com/benefits.

Application Statements: The application window is estimated to be 30 days from the posting date, though this may vary with business needs. By applying, you confirm your interest in the role and the company. You may be asked to participate in an on-camera interview and identity verification during the review process.