> Markdown version of [/jobs/ext/2032427-cybersecurity-engineer-6](https://www.wearedevelopers.com/jobs/ext/2032427-cybersecurity-engineer-6). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Engineer 6

- **Company:** M.C. Dean, Inc.
- **Location:** Chantilly, VA, United States
- **Experience:** Expert
- **Salary:** $258,960.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Word, Microsoft Excel, AutoCAD, Configuration Management, Cyber Security, Information Systems, Databases, Hardware Security Module, Intrusion Detection and Prevention, Microsoft Visio, Microsoft PowerPoint, Systems Integration, Trusted Systems, Software Vulnerability Management, IT Architecture, Information Technology, Process Control Systems, Citect SCADA Software, Operational Systems, Plan of Action and Milestones, Vulnerability Analysis
- **Published:** August 12, 2026
- **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/15581081?backUrl=%2Fcareer%2F15581081%2FCybersecurity-Engineer-6-Virginia-Chantilly

## About the Role

* 9+ Years of Experience with a Master's Degree in Information Technology, Risk Management, Cybersecurity
 * 12+ Years of Experience with a Bachelor's Degree in Information Technology, Risk Management, Cybersecurity
 * 15+ Years of Experience with an Associate's Degree in Information Technology, Risk Management, Cybersecurity
 * 18+ Years with a High School Diploma

Required Progressive Experience:

 * Working with industry and government agencies on the design of platforms and integrated systems
 * Working on government and/commercial projects implementing cybersecurity requirements in a variety of industrial control systems (e.g., building management, electronic security, fire alarm/mass notification, electrical distribution, power management, etc.)
 * Proficiency with ACAS and HBSS and mitigation strategies
 * Developing policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data
 * Assessment, mitigation, and closure of network vulnerabilities and vulnerability management eMASS
 * Establishing, managing, and tracking of Plan of Action & Milestones (POA&M)
 * Applying STIGs to servers, databases, applications, and other hardware Security Readiness Review (SRR) Tools (scripts and ACAS)
 * Ability to identify, maintain, and troubleshoot control network components
 * Excellent understanding of the DoD RMF lifecycle and NIST 800-53 controls implementation
 * Awareness of NIST Special Publication 800-82, Guide to Industrial Control Systems (ICS) Security and UFC 4-010-06 Unified Facilities Criteria (UFC) Cybersecurity of Facility
 * Working knowledge of operational control systems and implementing a variety of security assessment tools
 * Working knowledge of other operational control systems
 * Familiarity with DoDIN CCRI/CCORI and CYBERCOM TASKORDS Familiarity with various industry products

Also needed:

 * Strong Oral, Written and Presentation Skills with the ability and experience communicating directly with Customers
 * Demonstrated background working with multidisciplinary teams
 * Demonstrated time management and organization skills to meet deadlines and quality objectives
 * Strong MS Excel, Word, PowerPoint, AUTOCAD, Cameo and Visio Skills is a plus.

## Description

In this position you will work on developmental and operational teams responsible for system security engineering services of developmental and operational systems for our federal government client in a highly secure and sensitive environment.

 * Working closely and supporting team members, vendors, and government customers
 * Implementing DoD Security Technical Implementation Guides (STIGs) on traditional Information Technology (IT) and Operational Technology (OT) systems
 * Assisting in the development and verification of documentation necessary to complete the DoD RMF assessment and authorization process
 * Conducting ICS/SCADA system inventories following DoD guidance
 * Conducting vulnerability scanning and document system vulnerabilities
 * Supporting ISO standardization and Quality inspections
 * Participating in continuous improvement of organizational cybersecurity posture
 * Provide system security engineering services and/or products to ensure secure reliable and uninterrupted availability of the Sponsor's developed and deployed systems and networks.
 * Provide core security engineering principles are implemented into assigned programs information systems architecture.
 * Perform analysis and evaluation to design, implement, test and field secure systems, networks, and architectures. Work closely with the architects, engineers, and developers in the identification and implementation of appropriate information security functionality to ensure uniform application of security policy and enterprise solutions.
 * Enforce the design and implementation of trusted relations among external systems and architectures.
 * Assess and mitigate system security threats/risks throughout the program life cycle.
 * Contribute to the security planning, assessment, risk analysis, risk management, certification and awareness activities for system and networking operations.
 * Review assessment and accreditation (A&A) documentation, provide feedback on completeness and compliance of its content.
 * Apply system security engineering expertise in the following to: system security design process; engineering life cycle; information domain; cross domain solutions; commercial off-the-shelf and government off-the-shelf cryptography; identification; authentication; and authorization; system integration; risk management; intrusion detection; contingency planning; incident handling; configuration control; change management; auditing; certification and accreditation process; principles of IA (confidentiality, integrity, non-repudiation, availability, and access control); and security testing.
 * Provide security requirements to architects, engineers and developers.
 * Verify systems implementation and provide mitigation recommendations to facilitate secure systems for A&A and Continuous Monitoring support.
 * Serve as the security subject matter expert for the A&A and Continuous Monitoring processes.
 * Provide guidance to the System Owners and System Teams and recommend implementation strategies.
 * Support the Government to resolve conflicting system security engineering requirements., * Exposure to computer screens for an extended period of time.
 * Sitting for extended periods of time.
 * Reach by extending hands or arms in any direction.
 * Have finger dexterity in order to manipulate objects with fingers rather than whole hands or arms, for example, using a keyboard.
 * Listen to and understand information and ideas presented through spoken words and sentences.
 * Communicate information and ideas in speaking so others will understand.
 * Read and understand information and ideas presented in writing.
 * Apply general rules to specific problems to produce answers that make sense.
 * Identify and understand the speech of another person.


## Related Videos

- [Developing the Rich Text Editor for DeepL.com](https://www.wearedevelopers.com/videos/1172-developing-the-rich-text-editor-for-deepl-com)
- [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases)
- [WebAssembly Revolution: Elevating JavaScript's Reach and Performance](https://www.wearedevelopers.com/videos/1149-webassembly-revolution-elevating-javascript-s-reach-and-performance)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)