Cybersecurity Systems Engineer (Entry Level to SME)

CGI Federal is supporting a national security mission in the Intel sector, and is hiring Cybersecurity Systems Engineers across the entry-level to SME spectrum. This hybrid role is based in Arlington, VA, where you will help maintain and secure IT infrastructure and deliver cyber defense capabilities. The work includes day-to-day security operations, systems engineering documentation, and support for security investigations and compliance activities.

What you’ll do

• Maintain and upgrade basic security software such as antivirus, firewalls, and endpoint protection.
• Monitor networks and servers for unusual activity or policy violations.
• Run routine vulnerability scans, help patch outdated software, and coordinate scanning and patch management across enterprise and operational environments.
• Write and organize technical reporting, standard operating procedures, and security system documentation.
• Support senior engineers during security investigations by gathering logs and basic data.
• Assist with the operation, configuration, and maintenance of host-based, network-based, and cloud-based security systems.
• Implement and maintain hardware and software configuration management processes to secure systems in line with industry best practices (including DISA STIGs if applicable).
• Monitor security logs, analyze event alerts, and manage ticket queues for system and security issues.
• Perform vulnerability assessments and risk analyses to identify weaknesses and prioritize remediation.
• Support technical security documentation, Assessment and Authorization (A&A) activities, and compliance tracking.
• Participate in tactical execution of the Cyber Incident Response Team (CIRT) by investigating suspicious activity and securing system boundaries.
• Design, implement, and maintain Commercial-off-the-Shelf (COTS) and custom security products, including firewalls, SIEM, and identity management systems.
• Deploy and secure applications in virtualized and highly distributed cloud environments.
• Manage and secure endpoint baselines across Linux (Red Hat, Ubuntu) and Windows.
• Work on Agile/DevSecOps teams to automate security testing and integrate controls into CI/CD pipelines.
• Conduct SAST/DAST and manage application vulnerabilities as technical debt in backlogs, including triaging Static Code Analysis (SCA) findings.
• Perform root cause analysis on security incidents and recommend mitigations to improve security posture.
• Implement and audit technical controls against frameworks such as NIST SP 800-53, NIST 800-171, and CMMC Level 2.
• Prepare and execute testing procedures for conformance with DoD, Federal Civilian, and Intelligence Community requirements.
• Draft and maintain key systems engineering documentation including System Security Plans (SSPs), Plans of Action & Milestones (POA&Ms), and Interface Control Documents (ICDs).
• Architect, implement, and validate integrated security solutions across complex hardware/software/firmware environments (as applicable).
• Perform attack surface analyses and translate system-level security controls into technical performance requirements across disciplines such as Anti-Tamper and cryptography.
• Design zero-trust environments, use Terraform for Infrastructure as Code (IaC), and securely deploy Mission Unique Software (MUS) in virtualized clouds.
• Lead the RMF process from system categorization through continuous monitoring (ConMon), ensuring compliance with federal or commercial controls.
• Use tools such as ACAS for vulnerability scanning, patch management, and deviation mitigation assessment.
• Design and deploy security systems such as SIEM, EDR, and XDR, including support during critical incidents or cyber test and evaluation.
• Automate repetitive security tasks and identity workflows, with Python or PowerShell scripting strongly required.
• Coordinate RMF activities including Attack Surface Analyses (ASA), Security Control Traceability Matrices (SCTM), and POA&Ms.
• Lead tactical CIRT operations, perform forensic preservation, and resolve non-standard vulnerabilities.
• Serve as a technical point of contact, lead design reviews, and mentor junior or mid-level engineers.

Required qualifications

• Active TS/SCI with Poly is required for all levels.
• Entry Level: High School Diploma/GED with 4 years of relevant experience, or Associates Degree with 2 years, or Bachelors Degree with 0 years.
• Entry Level: Foundational certifications such as CompTIA Security+, CompTIA Network+, or similar vendor-specific badges.
• Entry Level: Basic understanding of networking protocols, operating systems (Windows/Linux), and fundamental security concepts.
• Junior Level/Moderate: High School Diploma/GED with 6 years, or Associates Degree with 4 years, or Bachelors Degree with 2 years, or Masters Degree with 0 years.
• Junior Level/Moderate: Understanding of operating systems (Windows/Linux), TCP/IP, and security platforms such as SIEM, EDR, or firewalls.
• Junior Level/Moderate: Foundational certifications such as CompTIA Security+/Network+ or similar credentials are highly valued (e.g., Cisco CCNA, AWS/Azure certifications).
• Mid-Level/Complex: High School Diploma/GED with 8 years, or Associates Degree with 6 years, or Bachelors Degree with 4 years, or Masters Degree with 2 years, or PhD with 0 years.
• Mid-Level/Complex: Hands-on experience with configuration management tools, scripting or automation (Python, Bash, PowerShell), and cloud ecosystems (AWS, Azure).
• Mid-Level/Complex: Working knowledge of risk management frameworks such as NIST, RMF, or ISO 27001.
• Mid-Level/Complex: Strong technical writing and communication with non-technical stakeholders, balancing operational support with longer-term architectural initiatives.
• Senior Level/Exceptionally Complex: High School Diploma/GED with 10 years, or Associates Degree with 8 years, or Bachelors Degree with 6 years, or Masters Degree with 4 years, or PhD with 2 years.
• Senior Level/Exceptionally Complex: DoD 8570.01-M compliance (IAM/IASAE Level III) or a CISSP.
• SME Level/Exceptionally Complex: High School Diploma/GED with 12 years, or Associates Degree with 10 years, or Bachelors Degree with 8 years, or Masters Degree with 6 years, or PhD with 4 years.
• SME Level/Exceptionally Complex: Advanced DoD 8570/8140 baseline certifications (e.g., CISSP, CISM, CASP+ CE).
• SME Level/Exceptionally Complex: Deep practical command of NIST SP 800-53, JSIG, CNSSI 1253, and NERC CIP.
• SME Level/Exceptionally Complex: Proficiency in COTS/GOTS security products, OS hardening (Linux/Windows), hypervisors/cloud deployment, and industrial protocols (if applied to OT/ICS).

Compensation

• USD 89,600 - 204,000 per year
• Estimated current range (where required by law): $89,600.00 - $204,000.00

Benefits

• Competitive compensation
• Comprehensive insurance options
• Matching contributions through the 401(k) plan and the share purchase plan
• Paid time off for vacation, holidays, and sick time
• Paid parental leave
• Learning opportunities and tuition assistance
• Wellness and Well-being programs

CGI offers are contingent on successfully completing a background investigation. Components can vary based on the assignment and/or security clearance level, and some investigations may include a credit check depending on role, clearance requirements, and applicable laws. CGI will consider qualified applicants with arrests and conviction records in accordance with local regulations and ordinances.