Cybersecurity Systems Engineer

Cybersecurity Systems Engineer

Location: Navy Yard – On-Site (Hybrid arrangement likely based on current program operations)

Clearance Requirement: Active DoD Secret Clearance Required

Environment: DoD / Navy ERP / SAP Enterprise Environment

Position Summary: Performs advanced cybersecurity compliance, RMF assessment, and MLS security activities supporting enterprise financial systems and SAP environments.

Required Experience:

• For a Junior Level candidate, 3–5 years of cybersecurity, RMF, or information assurance experience in a DoD environment.
• For a Mid Level candidate, 5-8 years of experience.

Key Responsibilities:

• Analyze and define security requirements for MLS issues.
• Design, develop, engineer, and implement solutions to MLS requirements.
• Guide efforts to gather and organize technical security information and mission requirements.
• Perform vulnerability assessments and interpret scan results.
• Lead RMF Assessment & Authorization activities using eMASS.
• Conduct DISA STIG compliance assessments across infrastructure and applications.
• Develop mitigation plans for non-compliant controls and POA&M items.
• Perform risk analyses and risk assessments in accordance with NIST SP 800-30.
• Develop and maintain cybersecurity standards and documentation.
• Support ATO/IATT package development and continuous monitoring activities.

Required Skills:

• NavyERP experience required
• eMASS (SA&A Tool)
• SecurityBridge SAP Vulnerability Scanner
• Strong knowledge of NIST RMF, DoD cybersecurity policies, DISA STIGs, and ETICS.
• Experience with automated RMF/A&A tools such as eMASS.
• Experience conducting vulnerability management and compliance assessments.
• Ability to communicate effectively with technical and leadership teams.

Preferred Qualifications:

• Hands-on experience with SPLUNK, Tenable, Microsoft Defender, Tripwire, and SecurityBridge.
• Experience supporting SAP systems, Navy ERP, and AWS GovCloud environments.
• Experience reviewing ABAP and Java application security findings