Cybersecurity Engineer

Quantum Sky is seeking a Cybersecurity Engineer to support a Government Program Management Office in Virginia Beach, Virginia. This role provides hands-on cybersecurity engineering across the system development life cycle, with a focus on RMF-driven risk management, assessment and authorization, and the documentation needed to reach Authority to Operate (ATO).

The position will be performed on-site at a government site in Virginia Beach, Dam Neck Activity (DNA), supporting program execution activities that connect security requirements to architecture, delivery, and continuous monitoring.

What you’ll do

• Provide cybersecurity engineering support throughout the SDLC, ensuring security requirements are incorporated into architecture, design, development, testing, assessment, authorization, delivery, and sustainment.
• Apply the cybersecurity risk management framework (RMF) in accordance with NIST SP 800-37 and DoDI 8510.01.
• Implement RMF life cycle steps to achieve system authorization and operation, including building, maintaining, and tracking cybersecurity baselines and authorization documentation in eMASS.
• Support cybersecurity architecture activities and the assessment and authorization (A&A) process leading to an ATO decision.
• Identify and apply cybersecurity best practices aligned to DoD and Navy cybersecurity strategy, and integrate security management into hardware, software, and applications.
• Assist Government managers with information security oversight, policy analysis, IT product acquisition, and program execution consistent with NIST SP 800-39 and DoDI 8500.01.
• Coordinate with Program Office managers and technical stakeholders to interpret technical requirements, standards and policies, architectural artifacts, budget development, implementation, auditing, program briefs, and continuous monitoring.
• Review ACAS vulnerability scans, and evaluate STIGs and SCAP content for applicable system components.
• Prepare and review authorization and security documentation including Systems Security Plans (SSP), Security Assessment Plans (SAP), Risk Assessment Reports (RAR), A&A packages, and System Requirements Traceability Matrices (SRTMs).

Qualifications

• 4+ years of experience in IT security, including RMF methodology and A&A.
• Bachelor’s degree in computer science, cybersecurity, information systems, or a related technical discipline, or an Associate’s degree with 6+ years of cybersecurity experience.
• Cybersecurity Workforce (CSWF) Intermediate Level knowledge and skills (IAT Level II), with required course completion or renewal certificate.
• Strong understanding of DoD cybersecurity policies, RMF steps and structure, A&A processes, and obtaining authorization to operate (ATO).
• Ability to operate and execute DISA tools, STIG Viewer, and eMASSter, with familiarity of eMASS functionality.
• Strong communication skills, including translating complex technical information for senior decision-makers, and preparing or delivering leadership presentations.

Tools and technologies

• NIST SP 800-37
• DoDI 8510.01
• eMASS (Enterprise Mission Assurance Support Service)
• NIST SP 800-39
• DoDI 8500.01
• ACAS
• STIGs (Security Technical Implementation Guides)
• SCAP (Security Content Automation Protocol)
• DISA tools
• STIG Viewer
• eMASSter

Nice to have

• Familiarity with Department of the Navy cybersecurity policies, organizations, and missions.
• Cybersecurity Workforce (CSWF) Advanced Level knowledge and skills (IAT Level III).

Compensation and benefits

• Salary: USD 100,000 - 112,000 per year
• Health/Dental/Vision
• 401(k) match
• Paid Time Off
• STD/LTD/Life Insurance
• Referral Bonuses
• Professional development reimbursement
• Parental leave

Additional details

• Location: Virginia Beach, VA (onsite)
• Clearance: Current active Secret clearance as reported in DISS