Cybersecurity Engineer

All hired employees are expected to have experience with Microsoft Copilot and / or an approved equivalent AI solution.

**Description
**

Data Systems Analysts, Inc. (DSA) is seeking a TS/SCI-cleared Cybersecurity Analyst / Engineer to support the security posture, compliance, and accreditation of enterprise systems in a secure DoD environment. The selected candidate will play a key role in maintaining cybersecurity readiness, supporting Risk Management Framework (RMF) processes, and ensuring the confidentiality, integrity, and availability of mission critical systems.

The Cybersecurity Analyst / Engineer will collaborate with both technical and compliance teams, supporting initiatives from vulnerability remediation and control implementation to RMF documentation and authorization sustainment. This role is suited for professionals with a strong foundation in DoD cybersecurity operations

This position is onsite at the National Ground Intelligence Center (NGIC) in Charlottesville, VA. Candidates willing to relocate to the Charlottesville area are encouraged to apply.

Responsibilities:

• Serve as a hands-on cybersecurity technical authority, providing guidance and solving complex security challenges across DoD systems, applications, networks, and enterprise environments.
• Advise architects, system owners, engineers, administrators, and cybersecurity personnel on security requirements, system design, technical risk, and secure implementation.

#DSA209

#LI-MH1

• Assess system architectures, configurations, technologies, and proposed solutions to identify vulnerabilities, security risks, and appropriate mitigation strategies.
• Perform vulnerability assessment and remediation using ACAS, Tenable/Nessus, SIEM, and other cybersecurity tools.
• Apply, validate, and troubleshoot DISA STIGs, SCAP benchmarks, security controls, configuration baselines, and system-hardening requirements.
• Support incident response, Continuous Monitoring (ConMon), vulnerability management, and ongoing assessment of system security posture.
• Implement and validate cybersecurity controls across operating systems, applications, networks, endpoints, and enterprise infrastructure.
• Identify opportunities to automate security assessments, vulnerability management, configuration validation, control testing, and other cybersecurity processes.
• Evaluate emerging technologies, modernization efforts, and architectural changes to identify cybersecurity requirements, technical risks, and secure implementation approaches.
• Provide cybersecurity engineering guidance for initiatives including Zero Trust, ICAM, cloud, DevSecOps, data-centric security, software supply chain security, security automation, and Artificial Intelligence (AI).