Cybersecurity Engineer

YSI is seeking a cybersecurity engineer to support federal systems through security compliance, vulnerability management, and RMF documentation.

Responsibilities

• Provide technical engineering and implementation of security solutions, including vulnerability scanning architecture design and management
• Engineer and support a Security Information and Event Management (SIEM) solution
• Integrate security testing into the development pipeline
• Define secure configuration baselines and produce technical documentation for security architecture
• Guide security packages through all seven steps of the NIST Risk Management Framework (RMF), from initial categorization and control implementation through continuous monitoring
• Develop Authorization and Accreditation (A&A) packages using eMASS
• Assist with system categorization, STIG applicability, and SSP development
• Prepare and submit RMF artifacts including Risk Assessment Reports (RARs), Security Assessment Reports (SARs), and POA&Ms to the Authorizing Official (AO)
• Assist with implementing and monitoring security controls, documenting findings, and tracking remediation activities through the Plan of Action and Milestones process
• Establish and maintain a comprehensive vulnerability management program to continuously identify, assess, and remediate vulnerabilities across AFOSI networks and applications
• Use vulnerability management tools such as ACAS (Tenable) or HBSS/McAfee to track, triage, and remediate findings
• Implement, audit, and validate DISA Security Technical Implementation Guides (STIGs) across servers, workstations, and network infrastructure
• Maintain up-to-date compliance tracking, hardware/software baselines, and artifact uploads using eMASS
• Use tools such as STIGMan, LanSweeper, SCAP, and SIEM platforms to support incident response, configuration management, and daily security posture assessments

Requirements

• 5+ years of experience in cybersecurity/Information Assurance (IA), including relevant experience in vulnerability management, RMF implementation, software certification, SIEM, incident response, and configuration/change management
• Practical experience with NIST RMF, including moving a system/RMF package through all steps from categorization to continuous monitoring
• Experience creating or updating System Security Plans (SSP), Risk Assessment Reports (RARs), and Security Assessment Plans (SAP), plus managing POA&Ms
• Knowledge of implementing and auditing DISA STIGs on servers, workstations, and network devices
• Hands-on experience with ACAS, eMASS, STIGMan, LanSweeper, SCAP, and SIEM platforms
• Bachelor’s degree in Cybersecurity, IT, Computer Science, or a related discipline (or equivalent professional experience)
• 3 years of experience in Systems/Network Administration
• Experience with PowerShell, Active Directory, and RHEL administration
• Must be certified at DoD 8140 IAT Level II or higher
• Must have a TS/SCI clearance or be SCI eligible
• CompTIA Security+ (Required)
• Top Secret (Required)
• ACAS: 1 year (Required)
• eMASS: 1 year (Required)
• RMF: 1 year (Required)
• SIEM: 1 year (Required)
• PowerShell: 1 year (Required)
• Active Directory: 1 year (Required)

Technologies

• ACAS (Tenable)
• HBSS/McAfee
• Security Information and Event Management (SIEM)
• eMASS
• NIST Risk Management Framework (RMF)
• DISA Security Technical Implementation Guides (STIGs)
• STIGMan
• LanSweeper
• SCAP
• Enterprise Mission Assurance Support Service (eMASS)
• PowerShell
• Active Directory
• RHEL
• DoD 8140 IAT Level II

Benefits

• 401(k)
• 401(k) matching
• Dental insurance
• Employee assistance program
• Flexible schedule
• Health savings account
• Professional development assistance

Compensation

$110,000.00 - $120,000.00 per year

License / Certification

• CompTIA Security+ (Required)

Security Clearance

• Top Secret (Required)

Work Location

• In person

Location: Quantico, VA (onsite)