Cybersecurity Engineer

Join Chugach Government Solutions in San Diego, CA (onsite) as a Cybersecurity Engineer focused on keeping programs aligned with DoD CS policy and recognized industry best practices. This role supports Risk Management Framework activities and security evaluations, including testing, documentation, and vulnerability scanning, with an emphasis on protecting sensitive data and sustaining ATO readiness.

What you’ll deliver

• Ensure project and task timelines are met through effective time management.
• Maintain clear client communication and facilitate weekly or bi-weekly meetings based on client requirements.
• Review and revise technical artifacts such as flowcharts, layouts, diagrams, charts, and code comments to represent software system information.
• Identify technology limitations and deficiencies in current systems, processes, and methods.
• Document and submit configuration items in a consistent manner aligned with lifecycle deliverable and policy requirements.
• Draft and execute test plans that validate task or project completion against client expectations and industry standards.
• Test software systems to evaluate functionality, compatibility, and performance.
• Document and update functional requirements, develop process flows, maintain directives and policies, and support Standard Operating Procedures (SOPs) for the training enterprise.
• Create detailed test reports summarizing results, flagging issues, and recommending improvements to system functionality.
• Collaborate with cross-functional teams to support integration and validation of deliverables.
• Support and improve testing methodologies, frameworks, and best practices to strengthen system quality.
• Ensure security information protections are documented, implemented, and followed for long-term consistency, including mechanisms designed to protect information.
• Validate that security controls and activities are continually assessed.
• Evaluate security gaps and propose mitigations across business processes, technical controls, or policy improvements.
• Assist program teams in capturing and refining information protection requirements, integrating them into system designs, supporting compliance, and achieving Authority to Operate (ATO).
• Recommend additional security requirements and safeguards when appropriate.
• Support planning and engagement for organizational security evaluations, systems analyses, and security architecture reviews.
• Support formal testing required by government accrediting authorities to validate security requirements.

Security engineering, scanning, and governance support

• Update, build, and configure modular security applications for UCES environments.
• Perform vulnerability scanning and provide technical support for the Assured Compliance Assessment Solution (ACAS) for the CS Division to support confidentiality, integrity, and availability of the network.
• Prepare System Security Plans, update Plans of Action and Milestones (POA&M), review system audits, and monitor corrective actions until closure.
• Develop security and privacy policies with IT governance and other policy groups, incorporating industry best practices.

How you’ll work

• Timely and cost-effective performance of duties.
• Timely completion and accuracy of all work.
• Handle coworkers and clients in a multicultural environment with professionalism and courtesy.
• Adhere to established company safety policies and industrial and office safety practices.
• Comply with company and contractual Standard Operating Procedures and Personnel policies and procedures.

Required qualifications

• Associate degree in computer science or related field; work experience may substitute for a degree.
• Three years of experience in Cybersecurity.
• DoD 8570-01M IAT Level II Baseline certification (for example: CompTIA Security+ CE, GSEC, SSCP, or similar).
• Utilization of Field-Programmable Gate Arrays (FPGA) and J-Link to program processors.
• Proven experience with shell scripting and automation.
• Excellent written and oral communication skills.
• Strong interpersonal skills and ability to work in group environments.
• Ability to work in a fast-paced environment with minimal supervision.
• DoD Secret Clearance to be maintained (US Citizenship required).
• Ability to pass any required background check and/or drug testing per contract.

Preferred (not required)

• Troubleshooting software and coding languages such as C++, C#, HTML, CSS.
• Experience with security evaluations, risk, and control assessments.
• Experience performing vulnerability scanning using DISA ACAS.
• Working knowledge of embedded systems and AC/DC electronics.
• Completion certificate within the domain (for example: Linux+, RHEL, C++, or similar certifications).
• Understanding of the DoD environment, Navy Shipboard systems, and familiarity with government agency reviews and audits.

Working conditions and physical requirements

• Primarily performed in an office setting using standard office equipment; travel may be required.
• Must be able to operate a computer, communicate verbally and in writing, read and review charts, perform analytical thinking, use sound judgment, and travel via vehicle and plane.

Technologies you may work with

• DoD CS policy, DoD 8570-01M IAT Level II, CompTIA Security+ CE, GSEC, SSCP
• FPGA, J-Link, shell scripting
• ACAS (Assured Compliance Assessment Solution), DISA ACAS
• UCES environments, System Security Plans, Plans of Action and Milestones