Cybersecurity Engineer

Location: Springfield, VA

Work Location: onsite

• Support daily cybersecurity operations for AI/ML T&E environments, tools, applications, and operational evaluation platforms.
• Maintain compliance with RMF and ATO requirements through management of security documentation, control tracking, and operational security processes.
• Support development, maintenance, and update of ATO packages, RMF artifacts, SSPs, and security compliance documentation.
• Track and manage POA&Ms, vulnerability findings, remediation activities, and security action items.
• Execute or coordinate required vulnerability scanning and security assessment activities across operational environments.
• Facilitate secure deployment and integration of AI/ML tools, models, datasets, and evaluation pipelines across NGA operational domains including COE, SECNET, and SBU.
• Support secure operations across multiple classification levels including UNCLASSIFIED, SECRET, and TS/SCI environments.
• Identify, assess, escalate, and support remediation of cybersecurity risks impacting operational T&E activities.
• Support implementation of security practices within DevSecOps workflows, operational pipelines, and AI/ML evaluation environments.
• Collaborate with ISSMs, engineers, developers, and mission stakeholders to support secure and compliant operational execution.
• Maintain audit-ready cybersecurity documentation and support operational readiness activities.

• Experience supporting cybersecurity operations, RMF compliance, vulnerability management, or security documentation activities.
• Familiarity with RMF, ATO processes, POA&M tracking, and operational cybersecurity practices.
• Understanding of cybersecurity concepts related to operational systems, cloud environments, or enterprise infrastructure.
• Ability to support secure operational environments and work collaboratively within multidisciplinary technical teams.
• Strong analytical, organizational, and communication skills.

• Experience supporting DoD, NGA, or Intelligence Community programs.
• Familiarity with DevSecOps workflows, cloud security, and operational AI/ML environments.
• Experience supporting vulnerability scanning, compliance assessments, or operational security monitoring activities.
• Familiarity with NGA operational domains, classified environments, and secure system integration processes.
• Security certifications such as Security+, CySA+, SSCP, or equivalent

• Bachelor’s Degree in IT or STEM related field, or additional relevant experience in lieu of a degree.
• Security certifications such as CISSP, CASP+, Security+, CySA+, SSCP, CCSP, or equivalent.

• Active TS/SCI clearance and the ability to pass a CI polygraph within 30 days.