Springfield, VA

Salary
Posted
Jul 19, 2026
Location
Springfield, VA
Last confirmed open
Jul 21, 2026

What this job asks for AI summary

A cybersecurity engineering role on a long-term contract supporting an Intelligence Community customer across multiple networks, security domains, and global locations. Day-to-day work centers on RMF/A&A compliance, STIG implementation and remediation, vulnerability management, POA&M tracking, and operating enterprise security infrastructure such as firewalls, IDS/IPS, and cloud environments. Suits candidates with a DoD or IC security background and hands-on experience with tools like ACAS, HBSS, and scripting languages.

Senior level · 5+ years · National · TS/SCI clearance · Contract

Must have (13)
RMFSTIGsACASHBSSCarbon BlackTaniumRedSealWindowsRHELBashPythonPowerShellPOA&M
Nice to have (3)
AWSSplunk or ElasticIaC

“or” means any one of them counts — you don't need all of them.

We read this from the posting text with AI. Skim the description below before ruling yourself out.

How this req sits in the market our data

What won't set you apart
Python51%PowerShell45%RMF40%

Most people in this occupation already list these. Still required — just not what gets you shortlisted.

What the occupation pays Median $132,021 (middle half $99,961–$167,095).

Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.

Why we read it this way (12)

The role is on a 10-year government contract supporting an Intelligence Community customer; the posting does not specify a single work location beyond 'multiple locations worldwide,' so no CBSA could be determined.

Clearance requirement is TS/SCI with the ability to obtain a CI Polygraph — the polygraph is listed as an ability-to-obtain, not a hard gate on current possession, but TS/SCI itself is a firm requirement.

Degree requirement: the JD accepts 'an equivalent combination of education, technical training, or relevant military/work experience' in lieu of a Bachelor's degree, so no minimum degree is flagged.

Experience range is stated as '5–10 years'; 5 years is used as the minimum.

The security tools requirement (ACAS, HBSS, Carbon Black, Tanium, RedSeal) is listed as 'or equivalent' in the Required Skills section — these are treated as hard gates on the capability, with the named tools as the primary options.

SOC classification is Medium confidence: the role blends hands-on cybersecurity engineering/ISSO functions (15-1212) with significant network infrastructure operations and sustainment work (15-1244); 15-1212 was chosen as the primary given the dominant IA/compliance/ISSO framing.

Splunk and Elastic are listed together under Desired Skills as an enterprise SIEM example; Elastic is captured as an alternative to Splunk.

IaC (Infrastructure-as-Code) appears under Desired Skills alongside security automation; no specific tool is named.

'A&A documentation' and 'POA&M' are named as distinct process artifacts explicitly required by the JD; they are retained as skills because the JD gates on demonstrated experience with them as concrete work products, not generic methodology.

Ignored 2 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): NIST SP 800-53, A&A documentation.

Requires a TS/SCI clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.

Posting is for a contract engagement — the market benchmarks below price full-time roles, so read the comp comparison with that in mind.

Read the full posting

The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.

Apply

Apply on employer site ↗