Geospatial Cyber Security Engineer – Multiple Positions at Junior/Mid/Senior Levels
NV5 · St Louis, MO · 2 wk ago
On-siteInformation TechnologyFull-time
Responsibilities
- Applying RMF processes to support system Assessment & Authorization (A&A), including control selection, implementation, assessment, and continuous monitoring
- Developing, reviewing, and maintaining security documentation such as SSPs, POA&Ms, SARs, and ATO artifacts in tools such as XACTA or eMASS
- Conducting vulnerability assessments and compliance scans (e.g., ACAS) and tracking remediation of findings and IAVM requirements
- Implementing and validating security controls aligned with NIST 800-53, CNSSI 1253, and related DOD guidance
- Supporting system hardening, patching, and configuration management in compliance with STIGs for Linux, Windows, and network devices
- Monitoring systems for security events and supporting incident response and risk mitigation activities
- Assessing security impacts of system changes and supporting configuration control boards (CCBs)
- Collaborating with systems engineers, administrators, and DevSecOps teams to integrate security throughout the system lifecycle
- Providing cybersecurity risk input to program leadership, Authorizing Officials (AOs), and stakeholders
Qualifications
- Required Qualifications:
- US citizenship with Active or Current (within two years of active) Top Secret Security Clearance with SCI eligibility
- Bachelor’s degree in Computer Science, Engineering, DevOps, or related technical field
- 5+ years of relevant experience
- DoD 8570 IAT Level II or higher certification (e.g., Security+, CySA+, CISSP)
- Experience with RM, A&A, POA&M, and ATO documentation (XACTA/eMASS)
- Hands-on vulnerability scanning and compliance tracking (ACAS, IAVM)
- Experience securing Linux and Windows systems, STIGs, patching, and system hardening
- Knowledge of NIST 800-series publications and incident response processes
- Strong analytical, communication, and collaborative skills
Preferred Qualifications:
- Scripting or development experience (Python, Java, React)
- DevSecOps tools and pipeline experience
- Experience with Linux (RedHat/CentOS), database, web apps, or big data platforms
- Familiarity with Agile environments and tools (Jira, Confluence)
- Experience with NIST SP 800-171 and Systems Security Engineering (SSE)
Clearance Requirement:
Active/Current Top Secret Clearance with SCI Eligibility
Benefits:
- Competitive compensation and benefits package including medical, dental, life insurance, FTO, 401(k), and professional development/advancement opportunities
Note:
Employment is contingent upon successful completion of a background check and drug screening.