Support DOMEX Technology Platform task orders by designing, building, and integrating secure systems for on-premises infrastructure.

Support secure architecture, design, and implementation for DoD systems in line with DoDI 8510.01, NIST SP 800-53, and other DoD security guidance
Lead integration of RMF activities into the SDLC, including selection, implementation, and validation of security controls
Develop and maintain SSPs, SARs, risk assessments, and POA&Ms
Apply STIGs and validate compliance using SCAP, STIG Viewer, and ACAS
Maintain vulnerability scanning infrastructure, analyze findings, and support mitigation or risk acceptance
Support system authorization, incident response, forensics analysis, and security automation efforts

Active TS/SCI with ability to obtain a CI Polygraph
Bachelor’s degree with at least 10 years of experience in the category field
At least one DoD 8570.01-M IASAE Level II certification: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE
Experience reviewing cybersecurity vulnerabilities for risk and relevance, and building mitigation/remediation plans across systems, network, application, and database vulnerabilities
Ability to architect, design, troubleshoot, maintain, and deploy vulnerability scanning solutions including OWASP, Fortify, SonarQube, and Tenable
Experience with XACTA, eMASS, or similar tools
Strong understanding of Microsoft Windows and Linux/UNIX operating systems
Experience with middleware/web technologies, databases, TCP/IP networking, and CI/CD platforms
Familiarity with NIST 800-171, NIST 800-172, NIST SSDF, CMMC, and CNSSI 1253
Experience supporting DoD/IC systems through the RMF+ process
Developer experience preferred in at least one scripting or programming language

Support multiple task orders under the DOMEX Technology Platform contract supporting NMEC
Design, develop, and implement secure systems in on-premises infrastructure
Integrate security across the system lifecycle, including RMF integration, security control validation, and vulnerability scanning/compliance

Software development experience with Python, Java, or React
Experience successfully achieving ATO under RMF+
Experience with big data applications
Experience with GitLab, Jira, and Confluence
Experience in Agile environments
Experience with OIDC or OAuth2
Experience with Kubernetes, Rancher, Strimzi, Cloudera, Active Directory, and scripting languages such as Bash, Python, or PowerShell

Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity)
Employee referral bonuses up to $10,000 per hired referral
Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent)

100% company-paid medical premiums for employees and eligible dependents (CareFirst, Kaiser, UnitedHealthcare; PPO, POS, HMO, and HSA-compatible plans)
100% company-paid dental premiums for employees and eligible dependents
100% company-paid vision premiums for employees and eligible dependents
100% company-paid premiums for short-term disability
100% company-paid premiums for long-term disability
100% company-paid premiums for accidental death & dismemberment (AD&D)
100% company-paid premiums for life insurance up to $200,000

401(k) with immediate vesting: 4% company match plus 4% non-elective company contribution (8% total)
401(k) pre-tax and Roth options

Flexible work schedules including flex time and compressed work periods (contract and project-dependent)

Location: United States (onsite)

Education/Experience: Bachelor’s degree; minimum 10 years (category field)

Required Certification: DoD 8570.01-M IASAE Level II (CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE)

Cyber Security Engineer 4

Job Description