About Careertakes

👉 Important disclosure: Careertakes is a third-party recruiting platform supporting this hiring process. If selected, you will be employed directly by our client, IT.

Applicants for this role may also receive access to additional matched opportunities through the Careertakes platform.

---

Position Overview

Confidential Client is hiring a Cybersecurity Systems Engineer in Arlington, VA. This role spans entry-level through subject-matter-expert (SME) responsibilities depending on experience and technical depth. The position requires an active TS/SCI with polygraph (Poly) and supports mission-focused IT and intelligence systems. The role is full-time and based in Arlington with a hybrid work model acceptable.

---

What You’ll Do

This role covers a range of cybersecurity systems engineering activities depending on level:

• Entry / Junior: support day-to-day cyber operations — maintain antivirus/endpoint controls, run vulnerability scans, gather logs for incident triage, and keep documentation current.
• Mid-level: design and deploy COTS/GOTS security tools (firewalls, SIEM, EDR/XDR), secure applications across virtualized or cloud environments, automate security tests in CI/CD, and manage vulnerability remediation.
• Senior / SME: architect integrated security solutions, lead RMF/A&A and continuous monitoring, perform attack surface and threat modeling, drive remediation of SCA findings, and mentor engineering teams.
• Across levels: participate in threat hunting, coordinate patching and configuration management, and implement controls mapped to NIST/DoD frameworks as applicable.

---

Key Responsibilities (examples by level)

• Entry-level
  • Assist with endpoint, network, and basic cloud security operations.
  • Run routine vulnerability scans and help with remediation tracking.
  • Produce technical documentation and SOPs; support incident investigations.
• Junior
  • Configure and maintain host-, network-, and cloud-based security tools.
  • Monitor security events and manage ticket queues; support CIRT triage.
  • Support compliance artifacts and A&A tasks.
• Mid-level
  • Design and implement secure architectures and system hardening across Linux/Windows.
  • Integrate security into DevSecOps workflows and CI/CD pipelines.
  • Perform SAST/DAST coordination, root-cause analysis, and threat hunting.
• Senior / SME
  • Lead RMF processes, Attack Surface Analyses, and system-level security design.
  • Architect zero-trust or IaC-based security solutions (Terraform, etc.).
  • Drive forensic preservation, incident response leadership, and technical mentorship.

---

Required Qualifications

• Active TS/SCI with Polygraph — required for all applicants.
• Education/experience will be evaluated per level (examples below are guidelines):
  • Entry: HS/GED + 4 yrs relevant OR Associate + 2 yrs OR Bachelor’s with 0 yrs.
  • Junior: HS/GED + 6 yrs OR Associate + 4 yrs OR Bachelor’s + 2 yrs OR Master’s + 0 yrs.
  • Mid: Bachelor’s + 4 yrs (or equivalent progression up to PhD options).
  • Senior/SME: progressive experience up to 12+ years depending on credential level.
• Certifications (examples by level): CompTIA Security+/Network+, DoD 8570/8140 baselines, CISSP/CISM/CASP+ for senior/SME roles.
• Technical skills:
  • Familiarity with Windows and Linux system administration and OS hardening.
  • Experience with SIEM, EDR/XDR, vulnerability scanners (ACAS, Nessus), and patch management.
  • Scripting/automation experience (Python, PowerShell, Bash) for mid+/senior roles.
  • Cloud security experience (AWS/Azure) and infrastructure-as-code practices for mid+/senior levels.
• Desired compliance knowledge: NIST SP 800-53/800-171, RMF, CMMC, JSIG/CNSSI for applicable environments.

---

Tools & Technologies (examples)

• SIEM platforms, EDR/XDR tools, vulnerability scanners (ACAS/Nessus).
• Linux distributions (Red Hat, Ubuntu), Windows Server/Client, hypervisors and virtualized/cloud platforms.
• Scripting languages: Python, PowerShell, Bash.
• DevSecOps & IaC: CI/CD pipelines, Terraform, containerization basics.
• Secure architecture practices and security control frameworks.

---

Compensation & Benefits

Confidential Client provides a competitive compensation package and benefits. A reasonable estimate for this U.S.-based role is $89,600 — $204,000 per year (range provided by Confidential Client). Benefit highlights typically include:

• Comprehensive medical, dental, and vision plans.
• Retirement plan with matching contributions and share purchase options.
• Paid time off, holidays, and paid parental leave.
• Learning and tuition assistance; wellness programs.

Salary placement within the range depends on experience, level, certifications, and role-specific factors.

---

Location & Work Model

• Job location: Arlington, VA (on-site/hybrid as required by program).
• Must hold and maintain active TS/SCI with Poly.
• Candidates must be able to successfully complete required background investigations.

---

Equal Employment & Candidate Support

Confidential Client and Careertakes are committed to equal opportunity. Reasonable accommodations are available for applicants with disabilities; please request accommodations early in the recruitment process. Final hiring decisions are made by people; Careertakes may use AI-assisted screening tools to support application review.

---

Equal Opportunity & Hiring Transparency

Careertakes and our client are Equal Opportunity Employers committed to building a diverse and inclusive workforce. We prohibit discrimination or harassment of any kind. To support a fair and efficient hiring process, AI tools may be used to assist with application review or resume screening. These tools do not replace human decision-making. Final hiring decisions are made by people.

If you have questions about how your data is used, please contact us directly.