Cybersecurity Engineer
Role details
Job location
Tech stack
Job description
Red Hat Enterprise Linux Public Key Infrastructure Critical Illness Insurance Rust (Programming Language) Python (Programming Language) Security Requirements Analysis Model Based Systems Engineering, The Cybersecurity Engineer will support system-level security initiatives across multiple Navy Submarine subsystems, focusing on Linux-based platforms, containerized environments, and emerging cloud-like architectures. This role suits an engineer who enjoys solving complex problems, working across decentralized systems, and driving security improvements from initial concept through full implementation. The position offers significant exposure to Red Hat-based Linux security, container security, and enterprise security frameworks, with the opportunity to influence security practices across a large, mission-critical environment., * Drive system-level cybersecurity initiatives across multiple Navy Submarine subsystems.
- Translate high-level security requirements and controls (such as NIST 800-53) into clear, actionable guidance for engineering teams.
- Develop, document, and implement security best practices across multiple subsystems and platforms.
- Assess existing subsystem architectures to identify security gaps and recommend practical, risk-based improvements.
- Coordinate with multiple engineering teams to standardize and implement security solutions in a consistent and scalable manner.
- Lead security initiatives through the full lifecycle, from analysis and design through implementation and validation.
- Configure, harden, and secure Red Hat-based Linux systems, including RHEL, CentOS, and Fedora.
- Implement and tune Linux security tools and controls such as SELinux, USBGuard, firewalld, and related mechanisms.
- Secure containerized environments using technologies such as Podman, Docker, and Kubernetes.
- Contribute to the design and security of on-premises or cloud-like infrastructures, including PKI and secure communications between systems.
- Develop custom security solutions, including scripts and lightweight tools, primarily in Python and, when needed, in C or C++.
- Automate enforcement of security controls and configuration baselines where possible.
- Design solutions to address unique or niche security requirements that fall outside standard patterns.
- Stay current with vulnerabilities, zero-day exploits, and emerging cybersecurity risks relevant to the environment.
- Proactively identify security risks across systems and subsystems and propose effective mitigation strategies.
- Collaborate with cross-functional teams to influence technical direction and ensure security is integrated into system designs.
- Contribute to hardening and securing file sharing and related protocols, such as NFS hardening, where applicable., Linux DevOps Ansible Firewall NIST 800 Equities Scripting Terraform Automation Subnetwork Market Data NIST 800-37 NIST 800-53 AI Security Open Mindset Communication Routing Table Cloud Security System Software Network Routing Ancient History Network Security Agile Methodology Security Analysis Workflow Management Amazon Web Services Cloud Infrastructure Technological Change Programming Languages Continuous Monitoring Vulnerability Scanning Command-Line Interface Database Administration Security Implementation Bash (Scripting Language) Assessment And Authorization Information Systems Security Scrum (Software Development) Infrastructure as Code (IaC) Security Requirements Analysis Virtual Private Networks (VPN) Systems Development Life Cycle Software Development Life Cycle AWS Certified Cloud Practitioner Troubleshooting (Problem Solving) Certified Information Systems Security Professional Top Secret-Sensitive Compartmented Information (TS/SCI Clearance) +0
Google IT Support Splunk Engineer Leidos Ashburn, VAOn-Site JIRA Linux Splunk Editing Ansible Equities Dashboard Scripting Leadership Management Automation ServiceNow Market Data RESTful API Self-Starter Microsoft 365 Cyber Security Prioritization Cloud Services Cloud Security Problem Solving Ancient History CompTIA Security+ Cyber Engineering Windows PowerShell Wide Area Networks Workflow Management Systems Engineering Amazon Web Services Integration Testing Information Systems Local Area Networks Regular Expressions Enterprise Security Atlassian Confluence Business Intelligence Requirements Analysis Information Technology Configuration Management Bash (Scripting Language) Cyber Threat Intelligence IAT Level II Certification Splunk Enterprise Security Network Planning And Design Git (Version Control System) Python (Programming Language) Troubleshooting (Problem Solving) JavaScript (Programming Language) Intrusion Detection And Prevention Federal Information Security Management Act Certified Information Systems Security Professional +0 Threat Detection Engineer Leidos Arlington, VAOn-Site Splunk Equities Dashboard Scripting Leadership Automation Innovation Mathematics Market Data Self-Starter Cyber Security Problem Solving Query Languages Ancient History Threat Detection Incident Response Windows PowerShell Workflow Management Workflow Automation GIAC Certifications Digital Transformation MITRE ATT&CK Framework
Requirements
CentOS Selinux Scripting Hardening Visionary Firewalld Leadership Automation Innovation Kubernetes Mitigation Subsystems Scalability NIST 800-53 Cyber Security Security Tools Problem Solving Security Controls Docker (Software) Cyber Engineering Influencing Skills Cloud Technologies Container Security Linux Distribution Security Solutions Enterprise Security Network File Systems Cyber Security Systems Linux Security Modules Continuous Development Artificial Intelligence, * Approximately 5-10+ years of experience in cybersecurity, systems engineering, or Linux administration.
- Strong understanding of Linux operating systems, particularly Red Hat-based environments such as RHEL, CentOS, and Fedora.
- Hands-on experience configuring and securing Linux systems and services.
- Experience with security frameworks and compliance standards, including NIST 800-53 or similar control sets.
- Ability to interpret security controls and requirements and apply them effectively to real-world systems and architectures.
- Experience working across multiple teams and influencing technical direction in a collaborative environment.
- Strong problem-solving mindset with the ability to operate effectively in ambiguous or evolving technical environments.
- Familiarity with implementing and managing Linux security tools such as SELinux, USBGuard, and firewalld.
- Security+ certification or the ability to obtain it within a defined timeframe.
Additional Skills & Qualifications
- Experience with container technologies such as Kubernetes, Podman, and Docker.
- Exposure to cloud or cloud-like architectures, including on-premises or hybrid environments.
- Scripting and programming experience, with Python as the preferred language.
- Additional programming experience in C or C++.
- Familiarity with Rust as a nice-to-have skill.
- Understanding of public key infrastructure (PKI), digital certificates, and secure system-to-system communication.
- Familiarity with Model-Based Systems Engineering (MBSE) concepts and artifacts is a plus but not required.
- Experience with file sharing and security protocols, including hardening of NFS or similar technologies.
- Knowledge of security frameworks, cloud technologies, and modern security architectures.
- Ability to create scripts or lightweight tools to automate and enforce security controls.
Work Environment
The role focuses on securing complex, mission-critical Navy Submarine subsystems built primarily on Linux and Red Hat-based platforms. You will work in an engineering-driven environment that emphasizes collaboration across multiple teams, including systems, software, and infrastructure engineers. The technical landscape includes Red Hat-based Linux distributions, container technologies such as Podman, Docker, and Kubernetes, and on-premises or cloud-like infrastructures that rely on PKI and secure communications. The position involves extensive use of security tools like SELinux, USBGuard, and firewalld, as well as scripting and automation with Python and other languages. The work environment values proactive security thinking, continuous learning about emerging threats, and the ability to translate complex security requirements into practical, implementable solutions., GIAC Cyber Threat Intelligence GIAC Certified Intrusion Analyst GIAC Certified Forensics Analyst GIAC Certified Forensic Examiner Troubleshooting (Problem Solving) Certified Information System Auditor (CISA) Security Information And Event Management (SIEM) +0
Benefits & conditions
This is a Contract position based out of Manassas, VA. Pay and Benefits
The pay range for this position is $65.00 - $75.00/hr.
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following:
- Medical, dental & vision
- Critical Illness, Accident, and Hospital
- 401(k) Retirement Plan - Pre-tax and Roth post-tax contributions available
- Life Insurance (Voluntary Life & AD&D for the employee and dependents)
- Short and long-term disability
- Health Spending Account (HSA)
- Transportation benefits
- Employee Assistance Program
- Time Off/Leave (PTO, Vacation or Sick Leave) Workplace Type