Xcelerate Solutions · 1 day ago
Cyber Security Engineer - TS/SCI
Hybrid Remote, Bethesda, Maryland
Full-time
Hybrid
Senior Level, Lead/Staff
8+ years expXcelerate Solutions is seeking a Cyber Security Engineer working across several Task Orders under the DOMEX Technology Platform (DTP) contract supporting NMEC. The role involves designing, developing, and implementing secure systems in on-premises infrastructure while ensuring compliance with DoD security requirements.
B2BRoboticsSoftware
No H1B
Security Clearance RequiredU.S. Citizen Only
Responsibilities
Support the secure architecture, design, and implementation of DoD systems in accordance with DoDI 8510.01, NIST SP 800-53, and other DoD security guidance
Lead the integration of RMF activities into the system development lifecycle (SDLC), including selecting, implementing, and validating security controls
Develop and maintain key security documentation such as System Security Plans (SSPs), Security Assessment Reports (SARs), Risk Assessments, and Plan of Action and Milestones (POA&Ms)
Collaborate with ISSOs, ISSMs, developers, and system owners to ensure systems are developed and maintained with approved security configurations
Apply Security Technical Implementation Guides (STIGs) to systems and validate compliance using tools such as SCAP, STIG Viewer, and ACAS
Maintain application, network, and database scanning infrastructure (application/product updates, database maintenance, benchmark/audit files, application/server builds, rule pack/content updates, scanner, or agent deployment etc.)
Analyze vulnerability scans and ensure timely mitigation or acceptance of risks based on DoD policies
Provide technical input to support and maintain system authorization
Participate in system reviews, architecture assessments, and engineering design reviews to embed cybersecurity from the outset
Develop and implement automation or security tools to improve the compliance and monitoring of systems
Support security incident response and forensics analysis in coordination with ISSMs and Security points of contact
Qualification
Required
BS degree and 8+ years of experience in cybersecurity. Additional relevant years of experience in lieu of degree is accepted
An active TS/SCI clearance with ability to obtain a Poly
Have at least one of the following DoD 8570.01-M IASAE Level II certifications: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE. NOTE: the CISSP Associate is not acceptable
Developer experience is preferred in a least one scripting / programming language
Experience with reviewing cybersecurity vulnerabilities for risk and relevance as well as in vulnerability mitigations/remediation planning, for identified systems, network, application and database vulnerabilities
Ability to architect, design, troubleshoot, maintain, and deploy vulnerability scanning solutions such as (OWASP, Fortify, Sonarqube, Tenable, etc.)
Experience with XACTA, EMass, or similar tool
Strong in-depth understanding of including Microsoft Windows and Linux/UNIX operating systems
Experience with middleware / web technologies (Apache, tomcat, IIS, etc.)
Experience with Databases (Postgres, MS SQL, MySQL, ElasticSearch, etc.)
Understanding of TCP/IP networking
Experience with Continuous Integration and Continuous Delivery Platforms (Jenkins, Bamboo, GitlabCI TFS, etc.)
Familiar with NIST 800-171, 800-172, NIST SSDF, and CMMC requirements
Experience with NIST Special Publications e.g. NIST SP 800-27, 30, 37, 53, 60, 171, NIST SSDF, CMMC requirements, and CNSS publication CNSSI 1253
Experience supporting DoD/IC systems through the entire Risk Management Framework Plus (RMF) process
Experience establishing a System Security Engineering management process to integrate security and privacy controls into complex hardware and software systems
Experience developing and reviewing security concept of operations, systems security plans, security risk assessments, contingency plans, configuration management plans
Experience with incident response plans, plan of actions and milestones, risk management plans, and vulnerability management plans
Strong communication skills; able to successfully communicate with management personnel, technical personnel and third parties
Preferred
Software development/coding experience with programming languages such as Python, Java, and React
Successfully achieved ATO under RMF+
Experience with big data applications
Experience with tools for ticketing and documentation (e.g., Gitlab, Jira, Confluence)
Experience working in an Agile environment
Experience with OIDC or Oauth2
Experience with any of the following technologies: Kubernetes, Rancher, Strimzi, or Cloudera
Active Directory
Scripting languages like bash, python, or PowerShell
Company
Xcelerate Solutions
Xcelerate Solutions is a company specialized in helping small businesses operate like big ones.
1001-5000 employees
Funding
Current Stage
Late StageTotal Funding
unknownKey Investors
McNally Capital
2024-02-06Acquired
2023-01-12Private Equity
Leadership Team
D
Daniel Olmes
Chief Risk Officer and Vice President of Government Affairs
Recent News
Washington Technology
2025-11-23
2025-11-19
Company data provided by crunchbase