Systems Engineer - Security

Come be part of a dynamic program that delivers enterprise infrastructure, systems engineering, and operational support across multiple mission-critical network environments. Our team designs, implements, and sustains modern technology solutions supporting real-world customer operations.

We foster a highly collaborative and technical culture that values innovation, continuous learning, and professional growth. Team members are encouraged to expand their expertise through training opportunities, cross‑functional collaboration, and hands‑on experience with a wide range of technologies supporting complex operational environments.

(shift hours and days of the week)

8hrs / day, 5 days per week, all onsite

Occasional after hours work for system maintenance

The Systems Engineer - Security is responsible for implementing, operating, and maintaining cybersecurity solutions that support enterprise and mission networks. The engineer will administer vulnerability management platforms, conduct security assessments, remediate identified vulnerabilities, and work closely with systems and network administrators to maintain a secure computing environment.

• Deploy, configure, administer, and maintain ACAS/Tenable Security Center infrastructure and associated scanning solutions
• Perform credentialed and non-credentialed vulnerability scans across Windows, Linux, network, and virtualized environments
• Analyze vulnerability scan results and prioritize remediation efforts based on risk and mission impact
• Coordinate with system and network administrators to remediate vulnerabilities and validate corrective actions
• Develop and maintain vulnerability management processes, reporting, and metrics
• Administer endpoint security platforms such as Trellix/HBSS, Microsoft Defender, or equivalent solutions
• Implement, monitor, and maintain security controls in accordance with DoD security requirements and organizational policies
• Perform system hardening activities utilizing DISA STIGs, CIS Benchmarks, and security best practices
• Support operating system and application patch management efforts across Windows and Linux platforms
• Develop scripts and automation to improve vulnerability management, security compliance, and reporting capabilities
• Investigate security findings and provide recommendations for mitigation and risk reduction
• Support RMF activities, security audits, inspections, and compliance assessments
• Maintain security documentation, standard operating procedures, and system configuration baselines
• Collaborate with system administrators, network engineers, ISSOs, and cybersecurity personnel to improve overall security posture
• Support incident response and cybersecurity operations activities as required

Standard working environment

• 5+ years of experience supporting cybersecurity operations, vulnerability management, system administration, or security engineering activities
• Experience deploying and administering ACAS/Tenable Security Center and Nessus scanners
• Experience conducting vulnerability assessments and interpreting scan results
• Experience remediating operating system, application, and configuration vulnerabilities in Windows and Linux environments
• Experience with enterprise patch management solutions such as WSUS, Ivanti, MECM/SCCM, or equivalent technologies
• Familiarity with Trellix/HBSS, Microsoft Defender, Tanium, or similar endpoint security platforms
• Knowledge of DISA STIGs, SCAP Compliance Checker, and security hardening methodologies
• Experience supporting cybersecurity compliance initiatives including RMF, NIST 800-53, STIGs, and related DoD requirements
• Working knowledge of…