Cybersecurity Engineer / Cybersecurity Subject Matter Expert (SME) – Army Tactical System

Position Summary

The Cybersecurity Engineer / SME will support cybersecurity activities for an Army tactical system, with emphasis on Risk Management Framework (RMF), Army cybersecurity compliance, vulnerability management, DISA STIG reviews, cyber scan analysis, and authorization support. This hands‑on role requires strong Army and DoD RMF experience, technical expertise reviewing DIDA STIGs, cybersecurity scans, vulnerability assessments, and authorization artifacts. The position is onsite at Ft. Belvoir.

Responsibilities

• Lead and support Army RMF activities for system authorization, cybersecurity compliance, and continuous monitoring efforts.
• Review, analyze, and maintain DISA STIG compliance artifacts, including STIG Viewer checklists (.CKL files), supporting evidence, and remediation status.
• Execute, review, and interpret cybersecurity scans, including SCAP Compliance Checker, ACAS, vulnerability scans, and related assessment results.
• Correlate DISA STIG findings, scan results, vulnerability data, and security assessment findings to identify compliance gaps, assess risk, and establish remediation priorities.
• Develop, review, and maintain cybersecurity documentation such as System Security Plans (SSP), Cybersecurity Strategies, POA&Ms, risk assessments, mitigation plans, and RMF authorization artifacts.
• Maintain cybersecurity records and authorization package data within eMASS to support IATT, ATO, Assess Only, and Continuous Monitoring requirements.
• Coordinate with Government stakeholders, Authorizing Officials (AO), Security Control Assessors (SCA), system engineers, software developers, cloud teams, vendors, and assessors to resolve findings and drive remediation to closure.
• Review vendor cybersecurity deliverables for technical adequacy, compliance, and alignment with Army and DoD requirements.
• Support cybersecurity test events, vulnerability assessments, penetration testing, security reviews, and authorization readiness activities.
• Evaluate cybersecurity risks and provide recommendations to program leadership regarding compliance posture, remediation status, risk acceptance, and authorization impacts.
• Support implementation of new Army and DoD cybersecurity policies, guidance, and requirements and assess program impacts.
• Serve as a cybersecurity advisor to program leadership and technical teams on RMF, vulnerability management, compliance, and risk management activities.

Requirements

• Active Secret Clearance required to start.
• Security+ CE or higher DoD 8140/8570‑compliant certification.
• Strong experience with RMF activities for Army or DoD systems and supporting tactical systems through IATT, ATO, and Continuous Monitoring.
• Solid knowledge of AR 25‑2, DoD RMF, NIST 800‑53 security controls, and Army cybersecurity requirements.
• Hands‑on experience reviewing DISA STIGs, STIG Viewer checklists, CKL files, and cybersecurity compliance evidence.
• Ability to identify compliance gaps and prioritize remediation.
• Experience developing and maintaining POA&Ms, remediation plans, risk assessments, mitigation plans, and RMF authorization artifacts.
• Ability to work independently with minimal supervision and effectively coordinate with Government personnel, assessors, engineers, software developers, cloud teams, and vendors.
• Education: BS Electrical Engineering with > 5 years experience (Level II) **or** MS Electrical Engineering (or equivalent) with > 15 years experience (Level III).

Benefits

MAG Aerospace offers a robust Total Rewards package that supports employee well‑being, including health, life, disability, financial, and retirement benefits, paid leave, professional development, and tuition assistance. Full‑time and part‑time employees working at least 30 hours per week are eligible for the full suite of programs; those below the threshold receive select offerings.

Pay

The projected compensation range for this position is $100,000 to $165,000 (annualized USD). Salary is determined by location, education, knowledge, skills, competencies, experience, contract affordability, and organizational requirements.