Cybersecurity Engineer II; InSITE; Secret Clearance

Position: Cybersecurity Engineer II (InSITE) - Secret Clearance
Overview Working across the globe, V2X builds smart solutions designed to integrate physical and digital infrastructure from base to battlefield. We bring 120 years of successful mission support to improve security, streamline logistics, and enhance readiness. Aligned around a shared purpose, our $3.9B company and 16,000 people work alongside our clients, here and abroad, to tackle their most complex challenges with integrity, respect, responsibility, and professionalism.

V2X is seeking an experienced Cybersecurity Engineer II to serve as the lead cybersecurity engineer for the InSITE application within the W-TRS program and Gobal Training Solutions (GTS). This role provides technical leadership for cybersecurity activities, including program planning, static and dynamic application security testing, penetration testing, monthly vulnerability assessments, quarterly STIG reviews, and RMF/ATO and continuous monitoring. The Cybersecurity Engineer II is responsible for driving the overall security posture of the InSITE solution across Dev, Test, and Production environments.

To include support to other cyber projects that need support to the program when needed.

Responsibilities Provide cyber programmatic support for InSITE:
Support program planning and estimation for cybersecurity tasks. Represent cybersecurity at TIMs and Agile ceremonies (planning, reviews, retrospectives). Troubleshoot and resolve or escalate security-related issues across Dev/Test/Prod environments. Lead static code analysis activities:
Plan and execute static application security scans (e.g., Sonar Qube or equivalent) per sprint. Analyze scan results, identify false positives, and prioritize vulnerabilities based on risk. Collaborate with development teams to define remediation approaches and timelines. Track remediation status and verify closure through re-scans. Conduct web application vulnerability scanning:
Plan and execute web application security scans for each release using approved DAST tools. Interpret results and consolidate findings into actionable reports. Work with developers and system administrators to ensure remediation is scheduled and completed. Execute monthly vulnerability assessments:
Prepare and configure scanning of virtual servers and infrastructure across Dev/Test/Prod (~20 servers). Run vulnerability scans and perform detailed analysis of findings. Correlate, deduplicate, and prioritize vulnerabilities; document risk and remediation recommendations. Coordinate cyber remediation activities with system owners and track progress. Update security documentation, dashboards, and continuous monitoring records. Perform quarterly STIG and SRG assessments:
Conduct DISA STIG/SRG reviews for technologies including: ASD STIG;
Cloud Computing Mission Owner Network and OS SRGs. Microsoft Windows Server, IIS (Server/Site), .NET Framework, Azure SQL. Endpoint security tools, browsers, and host firewalls. Document compliance status, deviations, mitigations, and residual risk. Maintain STIG checklists and ensure updates are reflected in system baselines. Support penetration testing and advanced assessments:
Assist in scoping and planning penetration tests (including rules of engagement). Perform or support penetration testing under guidance of senior staff. Contribute to penetration test reports with technical details and recommended mitigations. Support ATO / RMF and continuous monitoring:
Contribute to the development and maintenance of the Security Authorization Package. Provide control implementation evidence, participate in control assessments, and support POA&M management. Perform continuous monitoring tasks such as periodic scans, log review support, and compliance status updates. Prepare and maintain…