Cybersecurity Engineer
Budget / Salary$70,000–90,000
TypeFull-time job
LocationUnited States
Posted1 hour ago
Title: Cybersecurity Engineer
Location: Remote
Type: Full-time, W2
Salary: $70,000 – $90,000
Clearance: Must be able to pass a government background investigation; active Public Trust or clearance preferred
WHAT YOU'LL WORK ON
Keep a mission-critical U.S. Coast Guard (USCG) enterprise application environment secure and authorized. Working remotely on the CG COMPASS program for USCG Command, Control, Communications, Computers, Cyber and Intelligence (C5I), you'll design, implement, assess and continuously monitor cybersecurity controls across applications and infrastructure, partnering with engineers, developers, DBAs and customer security stakeholders.
WHAT YOU'LL DO
Perform vulnerability assessments, security engineering reviews and penetration testing support across applications and infrastructure
Run vulnerability management end to end: scanning, finding analysis, risk prioritization, remediation coordination and POA&M tracking
Harden and administer Red Hat Enterprise Linux (RHEL) servers, and apply secure configuration practices across Linux/Unix, Windows, databases and networked systems
Implement and verify security controls aligned with NIST 800-53 and FISMA, supporting Risk Management Framework (RMF) implementation and continuous monitoring
Develop and maintain ATO documentation, including SSPs, POA&Ms, BIAs and CISPs
Respond to security incidents, conduct basic forensic analysis and coordinate remediation
Provide security guidance to development and infrastructure teams
MUST-HAVES
Bachelor's degree in Cybersecurity, Computer Science, IT or a related field (additional relevant experience may substitute for a degree)
Approximately 2–6 years of cybersecurity experience, preferably in a federal or government contractor environment
Ability to satisfy government background investigation, suitability and security requirements
CompTIA Security+ CE certification
Working knowledge of NIST 800-53, RMF, FISMA and federal ATO processes
Hands-on experience with security tooling, including SIEM, IDS/IPS, EDR and vulnerability management
Hands-on hardening and administration of RHEL/Linux systems
Clear communication skills for working with engineers, developers, program leadership and customer security stakeholders
NICE-TO-HAVES
Active U.S. Government Public Trust or security clearance · DHS, DoW or civilian agency security programs · FedRAMP authorization and continuous monitoring
WHY VIVSOFT
100% employer-paid medical, dental and vision for employees
401(k) with employer match
Flexible PTO plus 11 paid holidays
Training and certification reimbursement
Fully remote role supporting the U.S. Coast Guard, on a program with option periods through 2029
ABOUT VIVSOFT
VivSoft solves complex federal problems with emerging and open technologies. We build secure software factories based on DoD reference designs and NIST frameworks, delivering AI/ML, data science, and microservices for DoD, healthcare, and civilian agencies.
Originally posted on Himalayas
Location: Remote
Type: Full-time, W2
Salary: $70,000 – $90,000
Clearance: Must be able to pass a government background investigation; active Public Trust or clearance preferred
WHAT YOU'LL WORK ON
Keep a mission-critical U.S. Coast Guard (USCG) enterprise application environment secure and authorized. Working remotely on the CG COMPASS program for USCG Command, Control, Communications, Computers, Cyber and Intelligence (C5I), you'll design, implement, assess and continuously monitor cybersecurity controls across applications and infrastructure, partnering with engineers, developers, DBAs and customer security stakeholders.
WHAT YOU'LL DO
Perform vulnerability assessments, security engineering reviews and penetration testing support across applications and infrastructure
Run vulnerability management end to end: scanning, finding analysis, risk prioritization, remediation coordination and POA&M tracking
Harden and administer Red Hat Enterprise Linux (RHEL) servers, and apply secure configuration practices across Linux/Unix, Windows, databases and networked systems
Implement and verify security controls aligned with NIST 800-53 and FISMA, supporting Risk Management Framework (RMF) implementation and continuous monitoring
Develop and maintain ATO documentation, including SSPs, POA&Ms, BIAs and CISPs
Respond to security incidents, conduct basic forensic analysis and coordinate remediation
Provide security guidance to development and infrastructure teams
MUST-HAVES
Bachelor's degree in Cybersecurity, Computer Science, IT or a related field (additional relevant experience may substitute for a degree)
Approximately 2–6 years of cybersecurity experience, preferably in a federal or government contractor environment
Ability to satisfy government background investigation, suitability and security requirements
CompTIA Security+ CE certification
Working knowledge of NIST 800-53, RMF, FISMA and federal ATO processes
Hands-on experience with security tooling, including SIEM, IDS/IPS, EDR and vulnerability management
Hands-on hardening and administration of RHEL/Linux systems
Clear communication skills for working with engineers, developers, program leadership and customer security stakeholders
NICE-TO-HAVES
Active U.S. Government Public Trust or security clearance · DHS, DoW or civilian agency security programs · FedRAMP authorization and continuous monitoring
WHY VIVSOFT
100% employer-paid medical, dental and vision for employees
401(k) with employer match
Flexible PTO plus 11 paid holidays
Training and certification reimbursement
Fully remote role supporting the U.S. Coast Guard, on a program with option periods through 2029
ABOUT VIVSOFT
VivSoft solves complex federal problems with emerging and open technologies. We build secure software factories based on DoD reference designs and NIST frameworks, delivering AI/ML, data science, and microservices for DoD, healthcare, and civilian agencies.
Originally posted on Himalayas
Apply on Himalayas →
Job sourced from Himalayas. Applications happen directly on the original platform — we never collect your data.