CyberSecurity Engineer

Cybersecurity EngineerSpatial Front, Inc. (SFI), a fast-growing federal technology solutions provider, is seeking a Cybersecurity Engineer to support and secure mission-critical infrastructure across a large enterprise environment comprising 900+ servers.In this role, you will lead hands-on vulnerability management, security compliance, and Risk Management Framework (RMF) authorization processes. You will serve as a technical expert responsible for continuous scanning, STIG application, POAM tracking, and remediation strategies to safeguard our federal client's assets.Location: Arlington, VA (hybrid/On-Site)ResponsibilitiesVulnerability Assessment & Mitigation: Perform automated and credentialed enterprise vulnerability scans across 900+ Windows/Linux server assets using Assured Compliance Assessment Solution (ACAS / Tenable.sc). Analyze raw scan results, evaluate true/false positives, prioritize risk, and coordinate patch/remediation workflows with systems administrators.Compliance & Hardening: Execute end-to-end Security Technical Implementation Guide (STIG) application and evaluation across large-scale server infrastructures. Validate compliance utilizing DISA STIG Viewer and automated benchmarks (SCAP Content).RMF & Authorization Artifacts: Lead and support Risk Management Framework (RMF) Steps 1 through 6 lifecycle activities. Prepare, maintain, and upload standard compliance artifacts into Enterprise Mission Assurance Support Service (eMASS) to maintain continuous Authority to Operate (ATO) posture.POA&M Management: Author, manage, and track Plans of Action and Milestones (POA&Ms) for open vulnerabilities and non-compliant controls. Work with stakeholders to define mitigation strategies, root cause analyses, and realistic completion milestones.Security Reporting & Ops: Drive continuous monitoring strategies, presenting vulnerability and compliance metrics to agency leadership and federal stakeholders.RequirementsClearance: Must be a U.S. Citizen with an active Secret Clearance (or ability to obtain/pass a federal background investigation).Education & Experience: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent operational experience) + 5+ years of dedicated cybersecurity engineering experience.Certifications: Active CompTIA Security+ (IAT Level II compliant).Hands-On Scale Experience: Proven experience conducting ACAS scans and vulnerability analysis across large environments (900+ servers).Direct experience applying and evaluating DISA STIGs at enterprise scale.Deep working knowledge of DoD RMF processes and direct experience navigating eMASS.Strong proficiency in writing, managing, and closing out POA&Ms.Desired / Nice-To-Have QualificationsIdentity & Access Management: Hands-on experience with Identity, Credential, and Access Management (ICAM), including user provisioning, role-based access control (RBAC), and access review tracking.Log Management & Auditing: Practical experience analyzing audit logs, building dashboards, and configuring security alerts using Splunk and Audit Vault systems.Advanced Certifications: CISSP (Certified Information Systems Security Professional), CISM, or CASP+.Experience with automated vulnerability/patch management tooling and scripting (e.g., PowerShell, Python, or Bash).Additional InformationClearance: Must be a U.S. Citizen with an active Secret security clearance or the ability to obtain one.Work Environment: On-site/Hybrid as required by the contract and program.Benefits: SFI offers a comprehensive benefits package. Details available at SFI Careers.This is a full-time, W2 position.No agencies, third parties, or Corp-to-Corp submissions.Spatial Front Inc. is an Equal Opportunity Employer — all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status.SFI participates in E-Verify.