Information System Security Engineer (Cybersecurity)

TL;DR

Information System Security Engineer (Cybersecurity): Implementing and documenting security controls for the Joint Transportation Management System (JTMS) with an accent on STIG configurations, vulnerability management, and DoD compliance. Focus on executing automated compliance validations, conducting security impact analyses, and hardening complex on-premises and cloud environments.

Location: Scott Air Force Base, IL

Company

An award-winning information technology and financial management consulting firm providing specialized services for government and military modernization initiatives.

What you will do

• Implement and document Security Technical Implementation Guide (STIG) configurations across various systems and platforms.
• Conduct Security Impact Analyses (SIAs) for system modifications, upgrades, and enhancements.
• Execute automated compliance validation and configuration assessments using SCAP Compliance Checker.
• Manage vulnerability identification, tracking, remediation, and reporting using Tenable Security Center.
• Support CyberArk Privileged Access Management (PAM) implementation and administration.
• Develop secure configuration baselines, system hardening standards, and technical security implementation guides.

Requirements

• Active Secret Security Clearance.
• 3–5 years of experience in cybersecurity engineering, system hardening, or vulnerability management.
• Hands-on experience with STIG Viewer and SCAP Compliance Checker.
• Experience with Tenable Security Center or equivalent vulnerability management solutions.
• DoD 8140.03M DCWF Basic Tier Certification; CEH required.
• Strong knowledge of secure configuration management principles and cybersecurity best practices.

Nice to have

• Experience with CyberArk PAM or Tenable Cloud Security.
• Experience supporting DoD cloud environments (Impact Levels 2–6).
• Knowledge of NIST SP 800-53, DISA STIGs, and RMF-authorized environments.
• Bachelor's degree in Computer Science, Cybersecurity, or a related technical field.
• Intermediate DoD 8140.03M certifications (e.g., Security+, GSEC, PenTest+).

Culture & Benefits

• Competitive salaries and a generous Paid Time Off (PTO) package.
• Full health benefits including medical, dental, vision, and life insurance.
• 401(k) retirement plan.
• Paid holidays aligned with the Federal calendar.
• Professional development support and team building events.