Junior Cyber Security Engineer

Support DOMEX Technology Platform task orders for NMEC by designing, building, and integrating security into on-premises systems across the full lifecycle.

Responsibilities

• Support secure architecture, design, and implementation of DoD systems in alignment with DoDI 8510.01, NIST SP 800-53, and other DoD security guidance
• Drive integration of RMF activities into the SDLC, including selection, implementation, and validation of security controls
• Develop and maintain SSPs, SARs, risk assessments, and POA&Ms
• Apply STIGs and validate compliance using SCAP, STIG Viewer, and ACAS
• Maintain vulnerability scanning infrastructure and assess findings to support mitigation or risk acceptance decisions
• Support activities across system authorization, incident response, forensics analysis, and security automation efforts

Requirements

• Active TS/SCI clearance with ability to obtain a CI Polygraph
• Bachelor's degree with minimum 3 years of experience in the category field
• Two additional years of experience may be substituted for the bachelor's degree
• At least one DoD 8570.01-M IASAE Level II certification: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE
• Developer experience preferred in at least one scripting or programming language
• Experience reviewing cybersecurity vulnerabilities to determine risk and relevance, and building mitigation or remediation plans for systems, network, application, and database vulnerabilities
• Ability to architect, design, troubleshoot, maintain, and deploy vulnerability scanning solutions such as OWASP, Fortify, SonarQube, and Tenable
• Experience with XACTA, eMASS, or similar tools
• Strong understanding of Microsoft Windows and Linux/UNIX operating systems
• Experience with middleware/web technologies, databases, TCP/IP networking, and CI/CD platforms
• Familiarity with NIST 800-171, NIST 800-172, NIST SSDF, CMMC, and CNSSI 1253
• Experience supporting DoD/IC systems through the RMF+ process

Preferred Qualifications

• Software development experience with Python, Java, or React
• Experience achieving ATO under RMF+
• Experience with big data applications
• Experience with GitLab, Jira, and Confluence
• Experience in Agile environments
• Experience with OIDC or OAuth2
• Experience with Kubernetes, Rancher, Strimzi, Cloudera, Active Directory, and scripting languages such as Bash, Python, or PowerShell

Technologies

• DoDI 8510.01, NIST SP 800-53, RMF, SDLC
• STIGs, SCAP, STIG Viewer, ACAS
• OWASP, Fortify, SonarQube, Tenable
• XACTA, eMASS
• Microsoft Windows, Linux/UNIX
• TCP/IP, CI/CD
• NIST 800-171, NIST 800-172, NIST SSDF, CMMC, CNSSI 1253
• RMF+
• Python, Java, React, GitLab, Jira, Confluence
• OIDC, OAuth2, Kubernetes, Rancher, Strimzi, Cloudera
• Active Directory, Bash, PowerShell

Benefits

• 100% company-paid medical premiums for employees and eligible dependents (CareFirst, Kaiser, UnitedHealthcare; PPO, POS, HMO, HSA-compatible options)
• 100% company-paid dental premiums for employees and eligible dependents
• 100% company-paid vision premiums for employees and eligible dependents
• 100% company-paid premiums for short-term disability
• 100% company-paid premiums for long-term disability
• 100% company-paid premiums for accidental death & dismemberment (AD&D)
• 100% company-paid premiums for life insurance up to $200,000
• 401(k) with immediate vesting: 4% company match plus 4% non-elective company contribution (8% total)
• 401(k) pre-tax and Roth options
• Up to 20 days of flexible paid time off (PTO)
• 11 paid floating holidays
• Flexible work schedules: flex time and compressed work periods (contract and project-dependent)
• Employee referral bonuses up to $10,000 per hired referral
• Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent)
• Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity)

Location: Bethesda, MD, United States (onsite)

Minimum experience: 3 years

Education: Bachelor's degree

Security clearance: Active TS/SCI with ability to obtain a CI Polygraph

Education and experience equivalency: High School Diploma/GED with 5 years; Associate’s Degree with 5 years; Bachelor’s Degree with 3 years; Master’s Degree with 3 years; PhD with 3 years