Virginia

Cybersecurity Jobs in Virginia

154 jobs found

Include remote jobs

1d ago

Cybersecurity Systems Engineer (Entry Level to SME)

CGI Group, Inc. Arlington, VA

Arlington, VA

1d ago

$90k - $204k/yr Full time Cloud Platforms Cloud Security Cybersecurity Tools

Apply Now

Job Description

CGI Federal is seeking Cybersecurity Systems Engineers (Entry Level to SME) to support national security efforts within the Intel sector. The role focuses on maintaining and securing IT infrastructure while delivering cyber defense capabilities in a hybrid environment based in Arlington, Virginia.

Responsibilities

As part of the cybersecurity engineering team, you will support day-to-day operations and contribute to incident readiness and risk reduction activities.

Assist in maintaining and upgrading basic security software such as antivirus, firewalls, and endpoint protection.
Monitor networks and servers for unusual activity and policy violations.
Run routine vulnerability scans and help patch outdated software.
Write and organize technical reports, standard operating procedures, and security system documentation.
Support senior engineers during security investigations by gathering logs and basic data.
Assist with the operation, configuration, and maintenance of host-based, network-based, and cloud-based security systems.
Help implement and maintain hardware and software configuration management processes aligned to industry best practices (for example, DISA STIGs if applicable).
Monitor security logs, analyze event alerts, and manage ticket queues for system and security issues.
Conduct vulnerability assessments and risk analyses to identify weaknesses and prioritize patching or remediation.
Assist with technical security documentation, support Assessment and Authorization (A&A) activities, and help track compliance.
Participate in tactical Cyber Incident Response Team (CIRT) execution by investigating suspicious activity and securing system boundaries.
Design, implement, and maintain COTS and custom security products, including firewalls, SIEM tools, and identity management systems.
Deploy and secure software applications within virtualized infrastructures and highly distributed cloud computing environments.
Manage and secure endpoint baselines across operating systems such as Linux (Red Hat, Ubuntu) and Windows.
Contribute to Agile/DevSecOps teams by automating security testing and integrating controls into CI/CD pipelines.
Perform static and dynamic source code analysis (SAST/DAST) and manage application vulnerabilities as technical debt within backlogs.
Support root cause analysis for security incidents and recommend mitigations to improve the security posture.
Coordinate vulnerability scanning, patch management, and threat hunting across enterprise and operational environments.
Implement and audit technical controls against compliance frameworks including NIST SP 800-53, NIST 800-171, or CMMC Level 2.
Prepare and execute testing procedures to assess conformance with DoD, Federal Civilian, or Intelligence Community requirements.
Draft and maintain systems engineering documentation such as System Security Plans (SSPs), Plans of Action & Milestones (POA&Ms), and Interface Control Documents (ICDs).
Architect, implement, and validate integrated hardware, software, and firmware security solutions for complex environments.
Perform attack surface analyses and decompose system-level security controls into technical performance requirements (including Anti-Tamper and cryptography as applicable).
Design zero-trust environments and implement Infrastructure as Code (IaC) with Terraform for securely deploying Mission Unique Software (MUS) in highly virtualized clouds.
Lead the RMF process from system categorization through continuous monitoring (ConMon), ensuring compliance with strict federal or commercial controls.
Triage findings from Static Code Analysis (SCA) and help establish technical debt in the software backlog.
Use tools such as ACAS for vulnerability scanning, patch management, and deviation mitigation assessment.
Design and deploy security systems such as SIEM, EDR, and XDR, including support during critical incidents or cyber test and evaluation.
Automate repetitive security tasks and identity workflows, with experience scripting in Python or PowerShell strongly required.
Architect enterprise-wide cyber systems by embedding security into design across hardware, software, and network components at OSI layers.
Manage RMF activities including Attack Surface Analyses (ASA), Security Control Traceability Matrices (SCTM), and POA&Ms.
Conduct advanced risk assessments, threat modeling, SCA triaging, and flaw remediation.
Lead tactical CIRT operations, perform forensic preservation, and resolve non-standard vulnerabilities.
Serve as a technical point of contact, lead design reviews with stakeholders, and mentor junior or mid-level engineering staff.

Requirements

All levels require an active TS/SCI with Poly.
Entry Level: High School Diploma/GED with 4 years of relevant experience, or Associates Degree with 2 years of relevant experience, or Bachelors Degree with 0 years of relevant experience.
Entry Level: Foundational certifications such as CompTIA Security+, Network+, or similar vendor-specific badges.
Entry Level: Basic understanding of networking protocols, operating systems (Windows/Linux), and fundamental security concepts.
Junior Level/Moderate: High School Diploma/GED with 6 years of relevant experience, or Associates Degree with 4 years of relevant experience, or Bachelors Degree with 2 years of relevant experience, or Masters Degree with 0 years of relevant experience.
Junior Level/Moderate: Understanding of operating systems (Windows/Linux), network protocols (TCP/IP), and security platforms such as SIEM, EDR, or firewalls.
Junior Level/Moderate: Foundational certifications such as CompTIA Security+, Network+, or similar vendor-specific credentials are highly valued (for example, Cisco CCNA, AWS/Azure certifications).
Mid-Level/Complex: High School Diploma/GED with 8 years of relevant experience, or Associates Degree with 6 years of relevant experience, or Bachelors Degree with 4 years of relevant experience, or Masters Degree with 2 years of relevant experience, or PhD with 0 years of relevant experience.
Mid-Level/Complex: Hands-on experience with configuration management tools, scripting or automation (for example, Python, Bash, PowerShell), and cloud ecosystems (AWS, Azure).
Mid-Level/Complex: Working knowledge of risk management frameworks including NIST, RMF, or ISO 27001.
Mid-Level/Complex: Strong technical writing, effective communication with non-technical stakeholders, and the ability to balance operational support with long-term architectural initiatives.
Senior Level/Exceptionally Complex: High School Diploma/GED with 10 years of relevant experience, or Associates Degree with 8 years of relevant experience, or Bachelors Degree with 6 years of relevant experience, or Masters Degree with 4 years of relevant experience, or PhD with 2 years of relevant experience.
Senior Level/Exceptionally Complex: DoD 8570.01-M compliance (IAM/IASAE Level III) or a CISSP.
SME Level/Exceptionally Complex: High School Diploma/GED with 12 years of relevant experience, or Associates Degree with 10 years of relevant experience, or Bachelors Degree with 8 years of relevant experience, or Masters Degree with 6 years of relevant experience, or PhD with 4 years of relevant experience.
SME Level/Exceptionally Complex: Advanced DoD 8570/8140 baseline certifications (for example, CISSP, CISM, CASP+ CE).
SME Level/Exceptionally Complex: Deep, practical command of regulatory frameworks including NIST SP 800-53, JSIG, CNSSI 1253, and NERC CIP.
SME Level/Exceptionally Complex: Proficiency in COTS/GOTS security products, OS hardening (Linux/Windows), hypervisors/cloud deployment, and industrial protocols (if applied to OT/ICS).

Location and Work Model

Location: Arlington, VA
Work model: Hybrid (acceptable)

Salary

Estimated annual range: USD 89,600 - 204,000

Benefits

Competitive compensation
Comprehensive insurance options
Matching contributions through the 401(k) plan and the share purchase plan
Paid time off for vacation, holidays, and sick time
Paid parental leave
Learning opportunities and tuition assistance
Wellness and Well-being programs

Additional Information

CGI Federal offers benefits to eligible professionals on their first day of employment.
Employment in the U.S. is contingent upon successfully completing a background investigation; components can vary by assignment and/or level of U.S. government security clearance, and some investigations may include a credit check depending on role and clearance requirements.
CGI will consider qualified applicants with arrests and conviction records in accordance with local regulations and ordinances.

View full job page →

1d ago

Cybersecurity Officer (Entry to Senior Level)

CGI Group, Inc. Arlington, VA

Arlington, VA

1d ago

$90k - $204k/yr Full time Cybersecurity Tools Data Security Endpoint Security

Apply Now

Job Description

CGI Federal is hiring a Cybersecurity Officer (Entry to Senior Level) in the Intel sector to protect digital assets through continuous monitoring, alert triage, incident support, and security governance. This role is based in the Arlington office with a hybrid working model acceptable.

Key Responsibilities

Monitor security tools and dashboards for unusual network traffic or suspicious activity.
Review basic security alerts, determine whether they are false alarms, and escalate confirmed threats to senior team members.
Serve as first responder to basic security alerts by mitigating minor threats and collecting preliminary data.
Assist with granting, removing, and managing employee access to company software and sensitive files.
Follow established procedures for minor incidents (for example, locking a compromised account).
Continuously review security logs and network traffic to identify suspicious behavior, anomalies, and potential breaches.
Write simple reports that summarize diagnostic test results or security events.
Escalate complex or high-severity cyber attacks to Level 2 or Level 3 senior security teams.
Execute diagnostic tests and vulnerability scans to identify potential weaknesses in systems and networks.
Apply antivirus updates, firewall configurations, and security patches across enterprise environments.
Document known vulnerabilities and draft regular system status reports for management.
Enforce organizational security policies and ensure adherence to statutory or regulatory requirements related to information access and privacy.
Grant, review, and revoke user access credentials to maintain least-privilege practices.
Conduct periodic security audits to measure compliance and identify inefficiencies.
Lead or assist with employee cybersecurity awareness training and phishing simulations.
Provide technical consultation and security best-practice documentation to staff.
Lead investigation of complex security alerts escalated from Level 1, including root-cause determination, blast-radius scoping, and rapid containment actions.
Conduct proactive threat hunting using endpoint data, network telemetry, and actionable intelligence.
Analyze system logs to identify abnormalities and suspicious network signals.
Configure, fine-tune, and deploy security solutions such as SIEM, EDR, firewalls, and DLP.
Author custom detection rules and detection playbooks.
Perform enterprise-level risk assessments, enforce adherence to security legislation, and manage security documentation (including SSPs, ATO lifecycle, and security controls).
Guide junior SOC or Level 1 analysts and communicate complex technical risks to executive leadership and IT teams through detailed post-mortem reports.
Conduct deep-dive threat hunting missions using hypothesis-driven methodologies to uncover covert and deeply embedded threats, including zero-day threats within enterprise architecture.
Intercept, deconstruct, and analyze complex malware, ransomware, and malicious binaries to understand execution, C2 infrastructure, and exfiltration pathways.
Lead the technical command of catastrophic and nation-state-level security incidents.
Perform forensic analysis across endpoints, networks, and cloud infrastructures, then execute surgical eradication and recovery protocols.
Review complex system designs, microservices, and network topologies.
Provide architectural oversight on encryption protocols, data protection in transit and at rest, and secure hardware/software integrations.
Conduct authorized red-team-style exploitation testing to simulate real-world attacks.
Contribute to threat intelligence and secure coding hardening guides.
Translate complex technical findings and threat landscapes into actionable, high-level strategic directives for executive leadership and stakeholders.

Required Clearance

All levels require an active TS/SCI with Poly.

Level-Specific Education and Experience

Entry Level: High School Diploma/GED with 4 years of relevant experience, or Associate’s Degree with 2 years of relevant experience, or Bachelor’s Degree with 0 years of relevant experience.
Junior Level/Moderate: High School Diploma/GED with 6 years of relevant experience, or Associate’s Degree with 4 years of relevant experience, or Bachelor’s Degree with 2 years of relevant experience, or Master’s Degree with 0 years of relevant experience.
Mid-Level/Complex: High School Diploma/GED with 8 years of relevant experience, or Associate’s Degree with 6 years of relevant experience, or Bachelor’s Degree with 4 years of relevant experience, or Master’s Degree with 2 years of relevant experience, or PhD with 0 years of relevant experience.
Senior Level/Exceptionally Complex: High School Diploma/GED with 10 years of relevant experience, or Associate’s Degree with 8 years of relevant experience, or Bachelor’s Degree with 6 years of relevant experience, or Master’s Degree with 4 years of relevant experience, or PhD with 2 years of relevant experience.

Skills and Qualifications

Basic IT Knowledge: Computer networks (for example, IP addresses and routers) and operating systems such as Windows, macOS, or Linux.
Problem-Solving: Strong critical thinking and the ability to research unfamiliar issues.
Communication: Ability to explain technical issues to non-technical coworkers or management.
Technical Skills: Working knowledge of TCP/IP, firewalls, endpoint security, and intrusion detection systems.
Technical Proficiencies (Mid/Senior): Strong working knowledge of Linux, Windows, macOS, networking protocols (TCP/IP), and cloud architecture (AWS, Azure), plus basic scripting knowledge (Python, PowerShell) where applicable.
Advanced Technical Proficiencies (Senior): Mastery of SIEM, SOAR, and EDR platforms; deep understanding of network protocols, cloud-native architecture security; and scripting/programming languages including Python, C, C++, or Assembly.

Certifications

Foundational certifications such as CompTIA Security+, Network+, or ISC2 CC are highly recommended for beginners.
Junior Level/Moderate: foundational certifications such as CompTIA Security+, [ISC] CCSP, or [CodeHS] are highly valued.
Mid-Level/Complex: industry-recognized certifications such as CompTIA Security+, GIAC Certified Incident Handler (GCIH), or CISSP.
Senior Level/Exceptionally Complex: elite credentials such as CISSP, GIAC Security Expert (GSE), OSCP, or CCIE Security.

Technologies

Windows, macOS, Linux
IP addresses, routers, TCP/IP
Firewalls, endpoint security, intrusion detection systems
SIEM, EDR, DLP, SOAR
AWS, Azure
Python, PowerShell, C, C++, Assembly

Location and Compensation

Location: Arlington, VA (hybrid)
Salary: USD 89,600 to 204,000 per year

Benefits

Competitive compensation
Comprehensive insurance options
Matching contributions through the 401(k) plan and the share purchase plan
Paid time off for vacation, holidays, and sick time
Paid parental leave
Learning opportunities and tuition assistance
Wellness and Well-being programs

View full job page →

2d ago

Application Security Engineer

Veilant Tysons, VA

Tysons, VA

2d ago

$115k - $145k/yr Full time Application Security Code Security Cybersecurity Tools

Apply Now

Job Description

Veilant is seeking an Application Security Engineer to validate, secure, and continuously improve software developed by internal and partner engineering teams.

Responsibilities

Audit software releases across major and minor cycles to intercept and remediate security flaws before deployment.
Analyze source code to identify, isolate, validate, and contextualize vulnerabilities in complex application codebases.
Build safe proof-of-concept examples to demonstrate exploitation paths and verify real-world impact.
Contextualize findings using application business logic, user workflows, data sensitivity, and production use cases.
Author remediation guidance and collaborate with development teams on patches, controls, or architectural mitigations.
Intercept and analyze application-layer network traffic using tools such as Burp Suite or similar intercepting proxies.
Inspect encrypted payloads, API calls, and authentication flows.
Assess and help secure core architectures across REST APIs, SQL databases, PostgreSQL, JWT/OAuth, identity providers, and token-based authentication mechanisms.
Perform threat modeling for web applications based on use cases, data flows, user roles, trust boundaries, and production environments.
Improve DevSecOps pipelines by integrating, tuning, and operationalizing SAST, DAST, SCA, IaC scanning, secrets detection, and container security tooling.
Support container runtime security efforts using monitoring and runtime protection tools such as Falco, NeuVector, or similar technologies.
Create standardized security reporting that translates technical findings into clear risk narratives for engineering teams and executive stakeholders.
Build a repeatable AppSec review process for major and minor software releases to help teams identify and resolve security issues before deployment.
Integrate and improve SAST, DAST, and SCA checks in CI/CD pipelines so security testing is part of the development lifecycle.
Establish threat modeling practices using common frameworks and apply them to Veilant’s Angular front-end, Java Spring Boot back-end, REST APIs, SQL databases, and authentication flows.
Partner with engineering and software teams to strengthen secure coding practices through collaborative reviews and practical remediation guidance.
Implement container runtime security best practices, including visibility, monitoring, and runtime protections for containerized workloads.
Write standardized security reports that communicate risk, impact, and remediation steps for both executive-level stakeholders and engineering teams.

Requirements

Ability to obtain a Security Clearance.
2+ years of software development experience in Java.
Hands-on experience reviewing or securing applications built with Java Spring Boot, Angular, REST APIs, SQL databases, and PostgreSQL.
Working knowledge of authentication and authorization technologies, including JWT, OAuth, identity providers, Entra, Keycloak, and token-based access models.
Experience intercepting, decrypting, manipulating, and analyzing web or application network traffic.
Demonstrated ability to find, validate, and explain vulnerabilities in a real codebase.
Familiarity with CI/CD tools such as GitLab CI, Azure DevOps, or GitHub Actions.
Experience with containerized environments and orchestration tools such as Kubernetes.
Exposure to infrastructure-as-code and container scanning tools such as Trivy, Kubesec, or similar technologies.
Understanding of cloud hosting environments such as Azure or AWS.
Familiarity with secrets management tools such as GitLab Secrets Manager, AWS KMS, Azure Key Vault, or Ansible Vault.
Experience with automated application security testing, including SAST, DAST, and SCA.
Familiarity with runtime security and monitoring tools for containers, such as Falco, NeuVector, or similar platforms.
Hands-on web security testing experience using Burp Suite or comparable tooling.
Strong written communication skills, including the ability to write reports for both technical and non-technical audiences.
OSWE, OSCP, and/or GXPN certifications are highly desirable.

Technologies

Java, Java Spring Boot, Angular
REST APIs, SQL databases, PostgreSQL
JWT, OAuth, Entra, Keycloak
Burp Suite
SAST, DAST, SCA, IaC scanning, secrets detection, container security tooling
Falco, NeuVector
CI/CD: GitLab CI, Azure DevOps, GitHub Actions
Kubernetes
Trivy, Kubesec
Azure, AWS
GitLab Secrets Manager, AWS KMS, Azure Key Vault, Ansible Vault
OSWE, OSCP, GXPN

Benefits

Flexible PTO + holidays
Generous 401k match benefit up to 10%, with an automatic 3% safe harbor contribution and additional matching based on employee contributions
Medical (HSA & PPO Plans Available), dental, vision, disability, and life insurance
Employer Contribution to Health Savings Account (HSA)
Learning & Development opportunities
Professional coaching services
Get the technology you want to do your job
Free daily snacks & drinks

Compensation and Work Location

Salary range: USD 115,000 - 145,000 per year
Location: Tysons, VA (onsite)

Physical Requirements

Must be able to remain in a stationary position 50% of the time; occasionally move about inside the office
Constantly work with computers and other information technology equipment
Ability to communicate information and ideas in a classroom style format; may stand at a podium for long periods of time

View full job page →

2d ago

Penetration Tester

Xcelerate Solutions Alexandria, VA

Alexandria, VA

2d ago

Full time Cybersecurity Tools Incident Response Information Security

Apply Now

Job Description

Xcelerate Solutions is hiring a Penetration Tester to support CyberPRIMES cybersecurity, privacy, records and information management, and related enterprise support for DHRA, including DMDC and OUSD(P&R), from Alexandria, VA onsite.

Responsibilities

Conduct Government-selected penetration-testing assessments and threat-hunting exercises following CSD-SOP-054 and NIST SP 800-115.
Create test plans and testing methodologies, execute assessments, and produce post-assessment out-briefs and final reports.
Support cooperative testing with cyber-tool administrators, SOC and incident-response analysts, and SIEM content developers to validate detection and alerting.
Perform pre-audit penetration testing.
Maintain Government-furnished penetration-testing laptops and tools.
Research emerging and existing threats and develop approaches to identify risk areas likely to be targeted by an intruder.
Use established penetration-testing methodologies and commercial or open-source offensive tools across networks, web applications, applications, and code.
Provide support to Red and Blue Team activities as needed.
Provide reporting and cooperative testing support for enterprise cybersecurity efforts tied to DHRA, including DMDC and OUSD(P&R).

Requirements

Bachelor’s degree and 3 years of experience.
U.S. Citizen.
Active Secret clearance.
Secret clearance is required when assigned duties involve classified information or SIPRNet access.

Technologies / Standards

NIST SP 800-115
CSD-SOP-054
SIEM
SIPRNet

Location

Alexandria, VA (onsite)

View full job page →

5d ago

Supervisory IT Cybersecurity Specialist (INFOSEC)

US Patent and Trademark Office Alexandria, VA

Alexandria, VA

5d ago

$169k - $197k/yr Full time Cyber Threat Intelligence Cybersecurity Information Security

Apply Now

Job Description

The US Patent and Trademark Office is hiring a Supervisory IT Cybersecurity Specialist (INFOSEC) to lead vulnerability management and cyber threat emulation efforts from the Vulnerability Management and Cyber Threat Emulation Branch (VMCEB). In this onsite role in Alexandria, Virginia, you will serve as the branch chief and help prevent cyberattacks by directing advanced intrusion detection, vulnerability management, and penetration testing activities.

Role focus

This position operates as the Vulnerability Management and Cyber Threat Emulation Branch Chief, providing technical and executive leadership across enterprise vulnerability management, cyber threat emulation, and proactive defense. The work emphasizes reducing cybersecurity risk by identifying weaknesses, validating remediation, and surfacing malicious activity before it causes significant impact.

Responsibilities

Provide executive leadership, strategic direction, and operational oversight for enterprise vulnerability management, cyber threat emulation, red team operations, threat hunting, attack surface management, and cybersecurity risk reduction activities.
Direct the planning, execution, and continuous improvement of agency-wide vulnerability management programs to identify, assess, prioritize, remediate, and validate cybersecurity weaknesses across enterprise information systems, cloud services, applications, networks, and emerging technologies.
Oversee proactive threat hunting using threat intelligence, behavioral analytics, forensic analysis, and cybersecurity telemetry to detect malicious activity, advanced threats, insider risks, and unauthorized activity.
Develop policies, procedures, standards, and operational guidance supporting cyber defense, vulnerability management, threat hunting, adversary emulation, and continuous monitoring activities.
Lead technical teams responsible for vulnerability assessments, penetration testing, cyber threat emulation, threat hunting, attack surface analysis, and cybersecurity engineering activities.

Required qualifications and eligibility

Applicants must be United States Citizens and Nationals (applications accepted from all U.S. Citizens or Nationals).
Resume and application responses must demonstrate job-related competencies.
Must meet the definition of specialized experience.
Required to pass a background investigation and fingerprint check.
Must be registered for Selective Service, if applicable (www.sss.gov).
If selected, you may be required to complete a one-year probationary period.
Must meet all qualification requirements upon the closing date of the announcement.
Must be Suitable for Federal Employment.
Within 120 days of Entry on Duty, obtain one of: (ISC)2 CAP or CISSP; ISACA CISM; GIAC GISF or GSLC.
Specialized experience must include, or be supplemented by, IT-related experience (paid or unpaid, and/or intensive training) demonstrating the competencies: Attention to Detail, Customer Service, Decision Making, Information Management, Interpersonal Skills, Oral Communication, Problem Solving, Teamwork, and Technical Competency.
Must also demonstrate supervisory competencies: Accountability, Customer Service, Decisiveness, Flexibility, Integrity/Honesty, Interpersonal Skills, Oral Communication, Problem Solving, and Resilience.

Technologies

NIST
CISA
Selective Service System
(ISC)2 CAP
CISSP
ISACA CISM
GIAC GISF
GSLC

Duties and work arrangements

Worksite is located in Alexandria, Virginia, and onsite presence is required for in-person functions.
The position may be eligible for situational telework in accordance with agency policy/business unit discretion.
The agency currently allows for 52 hours of telework per calendar year.
This role supports advanced intrusion detection, vulnerability management, and penetration testing through expertise aligned to VMCEB mission needs.

Specialized experience examples

Experience leading enterprise vulnerability management and cyber risk reduction initiatives, using NIST, CISA, and federal cybersecurity guidance to prioritize remediation, validate fixes, and strengthen security posture.
Experience managing proactive cyber defense capabilities including threat hunting, red team operations, penetration testing, adversary simulation, attack path analysis, and control validation to identify threats and improve resilience.
Experience providing supervisory leadership and executive advisory support, overseeing cybersecurity teams, developing policies, procedures, metrics, and governance frameworks, and briefing leadership on threats, vulnerabilities, and investment priorities.

Pay and employment conditions

Salary range: USD 169,279 - 197,200 per year.
This is a Non-Bargaining Unit position.
Enhanced security requirement: Sensitivity Level is critical sensitive.
Top Secret clearance expectation: the incumbent will require a Top Secret Compartmented Information clearance to attend Top Secret briefings with other Department of Commerce and Department of Homeland Security entities.
Fair Credit Act memo may be required if selected, to provide consent for one or more consumer credit reports for employment purposes.
Background investigation steps may include completing OF-306 (Declaration for Federal Employment) including fingerprint and credit check.
Relocation expenses are not authorized and will not be paid.
USPTO participates in E-Verify.
Federal salary payments are required via direct deposit.
CTAP and ICTAP candidates may be eligible for selection priority if they exceed minimum qualifications and attain at least a “well qualified” rating of 85 out of 100.

How you will be evaluated

Evaluations are based on qualifications demonstrated in application materials, application questionnaire responses, and required assessments.
Competencies assessed include: Accountability, Customer Service, Decisiveness, Flexibility, Interpersonal Skills, Problem Solving, and Resilience.
USA Hire Assessment includes a cut score based on the minimum proficiency level in critical general competencies.
In addition to the USA Hire Assessment, your resume will be reviewed using a Structured Resume Review for evidence of specialized experience and alignment to the announcement.
Overstating qualifications or cheating on an assessment may result in removal from consideration.
Best qualified candidates may be referred to the hiring manager and may be invited for an interview.

Required documents

Resume: submit a two-page resume (not to exceed 2 pages).
Professional or academic references: provide 2-3 references (name, phone, email), including one current supervisor.
Supporting documents: Veterans’ Preference documentation (if applicable).
Supporting documents: CTAP or ICTAP documents (if applicable).

Additional notes: If you are a male applicant born after December 31, 1959, you must certify Selective Service registration. All application materials become property of the US Patent and Trademark Office. Reasonable Accommodation requests are available for USA Hire Competency Based Assessments if a disability under the Rehabilitation Act would interfere with completing assessments. If you receive a URL to access USA Hire Assessments after the close of the announcement, you must complete all assessments within 48 hours.

View full job page →

5d ago

Senior Cybersecurity Engineer - RMF/ISSE Lead

CACI Sterling, VA

Sterling, VA

5d ago

$104k - $218k/yr Full time Manager Senior Application Security

Apply Now

Job Description

The Senior Cybersecurity Engineer - RMF/ISSE Lead will support and strengthen the security posture for a division’s family of Electronic Warfare systems. This onsite role in Sterling, VA focuses on leading RMF execution, guiding systems through Authorization to Operate (ATO), and managing a small team of Security Engineers across the system lifecycle.

Role Overview

Lead the security engineering effort for Electronic Warfare systems by executing Risk Management Framework (RMF) activities across Steps 1 through 6. Serve in ISSO/ISSE capacity to guide systems from initial categorization to ATO, while ensuring Assessment & Authorization (A&A) documentation and continuous monitoring support ongoing compliance.

Key Responsibilities

Lead, mentor, and manage a team of 3-5 Security Engineers.
Oversee project timelines and ensure delivery of high-quality security solutions; conduct performance evaluations and support ongoing professional development.
Direct the design and documentation of secure system architectures spanning web applications, application stacks, Web Application Firewalls (WAFs), and Intrusion Detection/Prevention Sensors (IDS/IPS).
Manage secure architecture activities that include antimalware technologies and Advanced Persistent Threat (APT) prevention.
Define security requirements and integrate security capabilities across all SDLC phases (initiation, acquisition/development, implementation, operations/maintenance, disposition) following NIST 800-64 Rev. 2 guidance.
Execute RMF activities (Steps 1-6) and perform ISSO/ISSE functions to support progress through ATO.
Direct team efforts supporting DoD or IC acquisition programs resulting in IATT and/or ATO.
Develop, maintain, and review A&A documentation using Xacta, eMASS, or equivalent tools, including SSP, SCTM, and BoE.
Ensure hardware and software meet Government Security Certification Officer (SCO) requirements and align with NIST SP 800-53, ICD 503, and CNSSI 1253 standards.
Implement continuous monitoring (ConMon) and lead security audits using IC and DoD approved scanning tools, including Nessus/ACAS, SCAP/SCC, STIG Viewer, Nmap, and additional vulnerability assessment platforms.
Direct incident response activities and participate in an on-call rotation for security incidents.

Required Qualifications

Bachelor’s degree in computer science, Cybersecurity, Engineering, Information Technology, or related field (or equivalent experience).
10+ years with demonstrated ISSE/ISSO responsibilities, preferably within the Intelligence Community or DoD.
Experience achieving IATT and/or ATO on DoD or IC acquisition programs.
People management or team leadership experience.
Current active TS/SCI eligibility.
DoD 8570/8140 IASAE Level III (e.g., CISSP).
Familiarity with RMF processes and NIST SP 800-53 and NIST 800-64 Rev. 2.
Experience integrating security across the full SDLC: initiation, acquisition/development, implementation, operations/maintenance, and disposition.
Working knowledge of network protocols (TCP/IP, DNS, HTTP/HTTPS), VPNs, IDS/IPS, firewalls, and DMZ configurations.
Hands-on Linux/Unix experience.
Experience with web applications, application stacks, WAFs, and application-layer security controls.
A&A tracking tools experience including Xacta or eMASS, and SCAP/SCC, plus vulnerability assessment tools such as Nessus, ACAS, and additional platforms.

Technologies and Tools

Risk Management Framework (RMF), NIST 800-64 Rev. 2, NIST SP 800-53, ICD 503, CNSSI 1253
ISSO, ISSE, IATT, Authorization to Operate (ATO)
Xacta, eMASS, SSP, SCTM, BoE
Nessus/ACAS, SCAP/SCC, STIG Viewer, Nmap, Linux/Unix
TCP/IP, DNS, HTTP/HTTPS, VPNs, IDS/IPS, firewalls, DMZ configurations
Web Application Firewalls (WAFs), web applications, antimalware technologies, Advanced Persistent Threat (APT) prevention

Benefits

Flexible time off benefit
Robust learning resources
Healthcare
Wellness
Financial benefits
Retirement
Family support
Continuing education
Time off benefits

Incident Response

Direct incident response activities and participate in an on-call rotation for security incidents.

Clearance and Certifications

Current active TS/SCI eligibility
DoD 8570/8140 IASAE Level III (e.g., CISSP)

Travel Requirements

Percentage of Travel Required: Up to 10%
Type of Travel: Local

Compensation

Salary range: USD 103,800 - 218,100 per year.

View full job page →

5d ago

Penetration Tester

Orison Solutions LLC Reston, VA

Reston, VA

5d ago

$55 - $58/hr Full time Cybersecurity Tools Ethical Hacking Exploit Development

Apply Now

Job Description

Orison Solutions LLC is seeking a Penetration Tester to support red team and network penetration testing activities from a Reston, VA hybrid work setup. This role emphasizes hands-on offensive security work, including social engineering, exploit development, and security assessments using widely used tooling.

Role focus

Perform network penetration testing with experience working alongside and against network infrastructure
Apply an understanding of network protocols, including how they can be used for command-and-control channels
Carry out social-engineering assessments
Develop or modify exploits, shellcode, and associated tooling
Conduct wireless security assessments
Conduct web application security assessments

Assessment and tooling experience

Use security assessment and offensive security tools such as Nessus, Metasploit, Burp Suite Pro, Cobalt Strike, or Empire
Review source code to identify security flaws

Technical environment

Work across a range of operating systems, including scripting with Bash and Powershell
Understand application behavior and architecture, including applications built with C#, .NET, Go, Java, or similar technologies