Job description

Overview Working across the globe, V2X builds smart solutions designed to integrate physical and digital infrastructure from base to battlefield. We bring 120 years of successful mission support to improve security, streamline logistics, and enhance readiness. Aligned around a shared purpose, our $3.9B company and 16,000 people work alongside our clients, here and abroad, to tackle their most complex challenges with integrity, respect, responsibility, and professionalism. V2X is seeking an experienced Cybersecurity Engineer II to serve as the lead cybersecurity engineer for the InSITE application within the W-TRS program and Gobal Training Solutions (GTS). This role provides technical leadership for cybersecurity activities, including program planning, static and dynamic application security testing, penetration testing, monthly vulnerability assessments, quarterly STIG reviews, and RMF/ATO and continuous monitoring. The Cybersecurity Engineer II is responsible for driving the overall security posture of the InSITE solution across Dev, Test, and Production environments. To include support to other cyber projects that need support to the program when needed. Responsibilities • Provide cyber programmatic support for InSITE : • Support program planning and estimation for cybersecurity tasks. • Represent cybersecurity at TIMs and Agile ceremonies (planning, reviews, retrospectives). • Troubleshoot and resolve or escalate security-related issues across Dev/Test/Prod environments. • Lead static code analysis activities: • Plan and execute static application security scans (e.g., SonarQube or equivalent) per sprint. • Analyze scan results, identify false positives, and prioritize vulnerabilities based on risk. • Collaborate with development teams to define remediation approaches and timelines. • Track remediation status and verify closure through re-scans. • Conduct web application vulnerability scanning: • Plan and execute web application security scans for each release using approved DAST tools. • Interpret results and consolidate findings into actionable reports. • Work with developers and system administrators to ensure remediation is scheduled and completed. • Execute monthly vulnerability assessments: • Prepare and configure scanning of virtual servers and infrastructure across Dev/Test/Prod (~20 servers). • Run vulnerability scans and perform detailed analysis of findings. • Correlate, deduplicate, and prioritize vulnerabilities; document risk and remediation recommendations. • Coordinate cyber remediation activities with system owners and track progress. • Update security documentation, dashboards, and continuous monitoring records. • Perform quarterly STIG and SRG assessments: • Conduct DISA STIG/SRG reviews for technologies including: • ASD STIG; Cloud Computing Mission Owner Network and OS SRGs. • Microsoft Windows Server, IIS (Server/Site), .NET Framework, Azure SQL. • Endpoint security tools, browsers, and host firewalls. • Document compliance status, deviations, mitigations, and residual risk. • Maintain STIG checklists and ensure updates are reflected in system baselines. • Support penetration testing and advanced assessments: • Assist in scoping and planning penetration tests (including rules of engagement). • Perform or support penetration testing under guidance of senior staff. • Contribute to penetration test reports with technical details and recommended mitigations. • Support ATO / RMF and continuous monitoring: • Contribute to the development and maintenance of the Security Authorization Package. • Provide control implementation evidence, participate in control assessments, and support POA&M management. • Perform continuous monitoring tasks such as periodic scans, log review support, and compliance status updates. • Prepare and maintain technical documentation and reports: • Produce clear, concise vulnerability and scan reports for internal and external stakeholders. • Update run books, procedures, and standard operating instructions for assessment activities. • Provide guidance and mentorship to junior cybersecurity staff as needed. • Perform other duties as assigned in support of W-TRS and GTS. Qualifications Education & Experience: • Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field; or an equivalent combination of education and experience. • Typically 3–6 years of cybersecurity, system security engineering, or closely related experience. Proven experience leading: • Application security assessments (SAST/DAST, vulnerability scans) for complex systems. • DISA STIG/SRG-based hardening for servers, applications, and databases. • RMF/ATO efforts and continuous monitoring for government/regulated systems. • Vulnerability scanning and management in multi-environment deployments. Knowledge, Skills & Abilities: • Expert knowledge of application security, OWASP Top 10, and secure SDLC practices. • Strong experience with vulnerability management across Dev/Test/Prod and with Windows Server, IIS, SQL/Azure SQL, and cloud-hosted environments. • Hands-on experience with: Enterprise vulnerability tools (e.g., Tenable/Nessus, Qualys, Rapid 7). Application security tools (e.g., SonarQube, Fortify, Veracode, Burp Suite, OWASP ZAP). DISA STIGs, DoD SRGs, and their implementation in production environments. Solid understanding of NIST SP 800-53, NIST RMF, and ATO/continuous monitoring requirements; Azure cloud security preferred. Demonstrated leadership: • Leading cross-functional security initiatives and remediation. • Collaborating effectively with managers, customers, and stakeholders. • Excellent written and verbal communication skills for technical reporting and presenting complex security issues to varied audiences. • Strong analytical and decision-making skills, balancing mission needs, risk, and compliance. CERTIFICATES, LICENSES & REGISTRATIONS: • DoD 8570/8140 compliant certification at IAT Level II or higher (e.g., Security+, CySA +, GSEC or similar) strongly preferred • Offensive or advanced security certifications (e.g., OSCP, OSWE, GPEN, GCIH) desirable. SECURITY CLEARANCE: • Ability to obtain and maintain a [Secret] security clearance for the WTRS program. • U.S Citizenship What We Bring • At V2X we strive to be market competitive in our total reward offerings. • The successful candidate’s starting pay will be based on, but not limited to, their job-related skills, experience, qualifications, work location, and market conditions. • Please speak with a recruiter for additional information. • Employee benefits include the following: • Healthcare coverage • Life insurance, AD&D, and disability benefits • Retirement plan • Wellness programs • Paid time off, including holidays • Learning and Development resources • Employee assistance resources • The following salary range is intended to display the value of the company's base pay compensation and may be modified at the discretion of the company. USD $120,000.00 – $130,000.00 • Pay and benefits are subject to change at any time and may be modified at the discretion of the company, consistent with the terms of any applicable compensation or benefit plans. At V2X, we are deeply committed to both equal employment opportunity, including protection for Veterans and individuals with disabilities, and fostering an inclusive and diverse workplace. We ensure all individuals are treated with fairness, respect, and dignity, recognizing the strength that comes from a workforce rich in diverse experiences, perspectives, and skills. This commitment, aligned with our core Vision and Values of Integrity, Respect, and Responsibility, allows us to leverage differences, encourage innovation, and expand our success in the global marketplace, ultimately enabling us to best serve our clients. #Clearance

Requirements

Must-haves

Support program planning and estimation for cybersecurity tasks.
Represent cybersecurity at TIMs and Agile ceremonies (planning, reviews, retrospectives).
Troubleshoot and resolve or escalate security-related issues across Dev/Test/Prod environments.
Plan and execute static application security scans (e.g., SonarQube or equivalent) per sprint.
Analyze scan results, identify false positives, and prioritize vulnerabilities based on risk.
Collaborate with development teams to define remediation approaches and timelines.
Track remediation status and verify closure through re-scans.
Plan and execute web application security scans for each release using approved DAST tools.
Interpret results and consolidate findings into actionable reports.
Work with developers and system administrators to ensure remediation is scheduled and completed.
Prepare and configure scanning of virtual servers and infrastructure across Dev/Test/Prod (~20 servers).
Run vulnerability scans and perform detailed analysis of findings.
Correlate, deduplicate, and prioritize vulnerabilities; document risk and remediation recommendations.
Coordinate cyber remediation activities with system owners and track progress.
Update security documentation, dashboards, and continuous monitoring records.
Conduct DISA STIG/SRG reviews for technologies including:
ASD STIG; Cloud Computing Mission Owner Network and OS SRGs.
Microsoft Windows Server, IIS (Server/Site), .NET Framework, Azure SQL.
Endpoint security tools, browsers, and host firewalls.
Document compliance status, deviations, mitigations, and residual risk.
Maintain STIG checklists and ensure updates are reflected in system baselines.
Support penetration testing and advanced assessments:

Nice-to-haves

Solid understanding of NIST SP 800-53, NIST RMF, and ATO/continuous monitoring requirements; Azure cloud security preferred.
DoD 8570/8140 compliant certification at IAT Level II or higher (e.g., Security+, CySA +, GSEC or similar) strongly preferred

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

agileazuresql

Platform: jibe
Effort: medium

Benefits

Benefits detected in the listing.

Vision

Paid Time Off

Wellness