Cybersecurity Engineer III; InSITE; Secret Clearance

Overview

Working across the globe, V2X builds smart solutions designed to integrate physical and digital infrastructure from base to battlefield. We bring 120 years of successful mission support to improve security, streamline logistics, and enhance readiness. Aligned around a shared purpose, our $3.9B company and 16,000 people work alongside our clients, here and abroad, to tackle their most complex challenges with integrity, respect, responsibility, and professionalism.

V2X is seeking an experienced Cybersecurity Engineer to serve as the senior/lead cybersecurity engineer for the InSITE application within the WTRS program. This role provides technical leadership for cybersecurity activities, including program planning, static and dynamic application security testing, penetration testing, monthly vulnerability assessments, quarterly STIG reviews, and RMF/ATO and continuous monitoring. The Cybersecurity Engineer III is responsible for driving the overall security posture of the InSITE solution across Dev, Test, and Production environments.

Essential Duties & Responsibilities

• Serve as the primary cybersecurity lead for the InSITE/WTRS program and main point of contact for program management, engineering, and customer stakeholders.
• Drive cybersecurity planning, schedules, and resource estimates; represent cybersecurity in design reviews, TIMs, and Agile events.
• Define and manage the integrated security assessment strategy (SAST, DAST, penetration testing, vulnerability assessments, STIG/SRG compliance) aligned with RMF and ATO requirements.
• Lead application security testing:
• Oversee static code analysis and web application vulnerability scanning.
• Interpret findings, assess risk, and guide remediation.
• Lead vulnerability management and continuous monitoring across Dev/Test/Prod:
• Direct monthly scanning and analysis of servers and infrastructure.
• Prioritize vulnerabilities, coordinate remediation, and refine monitoring, metrics, and reporting.
• Lead quarterly STIG/SRG assessments and system hardening for Windows Server, IIS, .NET, Azure SQL, and related technologies:
• Maintain accurate STIG documentation and drive remediation and risk acceptance.
• Plan and lead penetration tests:
• Develop test plans and rules of engagement.
• Coordinate execution and produce/review reports with clear risk and mitigation guidance.
• Own RMF/ATO and continuous monitoring for InSITE:
• Lead Security Authorization Package development and submission.
• Oversee control implementation, assessment, POA&M management, and ongoing risk activities.
• Ensure scans, log reviews, and configuration checks are executed and documented.
• Mentor Cybersecurity Engineers I and II; promote secure design, coding, and operations.
• Produce and review formal security deliverables (vulnerability and pen test reports, ATO documentation, STIG packages) and present findings to leadership and customers.
• Identify and drive process and tool improvements, including automation and CI/CD integration.
• Perform other duties as assigned.

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field; or equivalent experience.
• 6+ years of progressive experience in cybersecurity or system security engineering.

• Application security assessments (SAST/DAST, vulnerability scans) for complex systems.
• DISA STIG/SRG-based hardening for servers, applications, and databases.
• RMF/ATO efforts and continuous monitoring for government/regulated systems.
• Penetration testing (hands-on or through oversight of specialized teams).

• Expert knowledge of application security, OWASP Top 10, and secure SDLC practices.
• Strong experience with vulnerability management across Dev/Test/Prod and with Windows Server, IIS, SQL/Azure SQL, and cloud-hosted environments.
• Hands-on experience with:
  Enterprise vulnerability tools (e.g., Tenable/Nessus, Qualys).
  Application security tools (e.g., Sonar Qube, Fortify, Veracode, Burp Suite, OWASP ZAP).
  DISA STIGs, DoD SRGs, and their implementation in production environments.
  Solid understanding of NIST SP 800-53, NIST RMF, and ATO/continuous…