Cyber Security Engineer

Oversees the implementation of DoDD 8530.1, DoDD 8500.2, DoDI 8510.1, DoDI 8510.01, Risk Management Framework, and other applicable NIST and CNSS IA directives, instructions, and guidelines, to include interfacing with MDA Information Assurance management and case managers. Designs, develops, and implements solutions that meet network and system security requirements and performs vulnerability and risk analyses of computer systems, networks, and applications. Leads the implementation of required network security to safeguard computer systems, networks, and data in accordance with current policies and regulations.

Assesses the security risks of IT systems, networks, and software applications and documents them in formal security and risk assessments and supporting artifacts for the MDA Authorizing Official and Security Control Assessor process. Provides insight into cyber policy and technical decisions. Tests to validate established security requirements, recommends additional safeguards, supports formal testing required by government accrediting authorities, and prepares System Security Plans., Serve as primary or secondary ISSO for assigned MDA enclaves and systems Implement RMF in accordance with NIST SP 800-37 and assess security controls against NIST SP 800-53 Rev 5 Develop and maintain System Security Plans, contingency plans, security checklists, Privacy Impact Assessments, and ATO packages in eMASS Create and track Plans of Action and Milestones (POA&Ms), with monthly updates through remediation Run and analyze vulnerability scans using ACAS/Nessus, and drive patching and STIG compliance with system administrators Prepare waivers and risk exceptions for vulnerabilities that cannot be remediated Maintain continuous monitoring of assigned systems and brief cyber posture to technical and non-technical stakeholders Ensure compliance with FISMA, NIST, DoD, and MDA cybersecurity policy

Bachelor’s degree 0 to 10 years of relevant experience DoD 8570.01-M / 8140 IAT or IAM Level II baseline certification (for example, Security+ CE) Active Secret clearance

Preferred Qualifications Experience as an ISSO on Missile Defense Agency or other DoD systems Hands-on experience with eMASS and ACAS, including ACAS Operator certification Systems administration background in Windows, Windows Server, and Linux environments Familiarity with STIG Viewer, Tanium, Trellix, or similar endpoint security tools CGRC (formerly CAP) or equivalent RMF-focused certification, earned or in progress COMSEC custodial experience

Medical, dental, and vision insurance through Blue Cross and Blue Shield of Alabama 401(k) plan with a Safe Harbor employer contribution 120 hours of paid time off per year, plus 11 paid federal holidays Company-paid long-term disability and group term life coverage, with optional voluntary life and accident coverage

Why Vanguard We are deliberately small. Every team member has a visible role in the quality and integrity of what we deliver to our government customers, and engineers here own real scope rather than a slice of someone else’s. You get direct access to company leadership, on a team small enough that your work is visible without having to campaign for it.

Vanguard Defense Solutions is a Huntsville-based defense contractor delivering software engineering, IT services, and cybersecurity capabilities to the Department of Defense and federal agencies. We support mission-critical programs at Redstone Arsenal and beyond, working alongside industry primes to deliver secure, scalable systems for the warfighter. Our engineers own real scope, work directly with leadership, and see the impact of their work on the mission.