Sr Messages Services and Security Engineer

Electrosoft Services, LLC is an award-winning company providing comprehensive technology-based solutions and services to federal customers. Specializing in cybersecurity, we also focus on ICAM, Zero Trust, digital engineering and transformation, and enterprise AI and intelligent automation. We retain highly qualified employees by offering meaningful work, growth opportunities, and work-life balance. Our team culture includes Lunch & Learn sessions, fun group activities, and recognition for outstanding effort.

About the role

The Cybersecurity Engineer serves as the technical lead for enterprise web application and infrastructure vulnerability management. This position collaborates with system owners, developers, network engineers, and cybersecurity teams to ensure compliance with DoD cybersecurity requirements.

Responsibilities

• Conduct authenticated and unauthenticated vulnerability scans of web applications, APIs, servers, databases, operating systems, and network devices.
• Perform web application security assessments using automated and manual testing techniques.
• Validate vulnerabilities to eliminate false positives.
• Analyze Common Vulnerabilities and Exposures (CVEs), Common Weakness Enumerations (CWEs), and associated security risks.
• Prioritize vulnerabilities using CVSS, exploitability, mission impact, and threat intelligence.
• Develop remediation recommendations and mitigation strategies.
• Support patch management activities and verify remediation effectiveness.
• Perform secure configuration reviews against DISA STIGs and other security baselines.
• Produce technical reports, executive dashboards, and risk summaries.
• Support continuous monitoring (RMF Step 6).
• Coordinate with ISSOs, ISSMs, developers, and infrastructure teams.
• Support Authority to Operate (ATO) activities and POA&M management.
• Assist during security audits and inspections.
• Maintain vulnerability management metrics and KPIs.
• Support incident response investigations involving vulnerable systems.
• Develop scripts or automation to improve vulnerability management processes.

Requirements

• Ten (10) years of relevant IT experience.
• Five (5) years of relevant OT experience.
• Moderate Risk, Confidential, Non-Critical Sensitive, Tier 3/NACLC/ANACI investigation (required at time of proposal).
• Relevant certification meeting DOD 8570/8140 IAT level III, and IASAE level III (IASAE III Certification required within 6 months of contract start).

Qualifications

• Microsoft Certified Solutions Associate or Expert
• Cisco Certified Network Administrator
• Microsoft Azure Security Technologies
• Amazon Certified Security