Cyber Security Engineer, Jr

About the Role

CST is seeking a skilled Cybersecurity Engineer with hands-on experience in designing, implementing, and remediating technical cyber controls across DoD contractor and commercial environments. The ideal candidate will demonstrate expertise in Linux hardening, secure coding, and compliance with NIST standards, as well as strong documentation and communication skills.

Key Responsibilities

• Design, develop, and implement technical cyber controls for security applications and infrastructure.
• Harden Linux servers (RHEL-family, Alma Linux, Ubuntu, Kali) using SELinux, firewalled, least privilege, and shell scripting.
• Apply secure coding practices in Python, including input allow listing, secrets management, and constant-time authentication checks.
• Prepare design alternatives, deployment requirements, and testing approaches for security applications.
• Assess and remediate controls derived from NIST SP 800-53 and NIST SP 800-171; track remediation through POA&Ms.
• Conduct vulnerability assessments using Tenable Nessus and prioritize findings by CVSS score and business risk.
• Monitor and investigate security alerts across Splunk, Elastic, Lima Charlie, and Sentinel One; escalate confirmed threats.
• Author technical documentation, including POA&Ms, design specifications, deployment instructions, and testing plans.
• Collaborate with development teams to integrate security controls and requirements into new and existing applications.
• Research and configure cyber controls to align with CIS Benchmarks, DISA STIG, and FIPS 140-2 guidelines.

Requirements & Tech Stack

• Technical cyber controls design and implementation.
• Linux hardening and systems-level configuration tuning.
• Secure coding practices in Python and Flask (REST APIs).
• Experience with NIST SP 800-53, NIST SP 800-171, NIST RMF, CMMC, POA&Ms, DoD requirements.
• Familiarity with CIS Benchmarks, DISA STIG, FIPS 140-2.
• Vulnerability assessment tools: Tenable Nessus, Splunk, Elastic, SentinelOne, Wireshark, Kali Linux.
• Bash and shell scripting, cron automation, PowerShell.
• Strong professional documentation and communication skills.

Qualifications

• Technical cyber controls design and implementation.
• Linux hardening and systems-level configuration tuning.
• Secure coding practices in Python and Flask (REST APIs).
• Experience with NIST SP 800-53, NIST SP 800-171, NIST RMF, CMMC, POA&Ms, DoD requirements.
• Familiarity with CIS Benchmarks, DISA STIG, FIPS 140-2.
• Vulnerability assessment tools: Tenable Nessus, Splunk, Elastic, SentinelOne, Wireshark, Kali Linux.
• Bash and shell scripting, cron automation, PowerShell.
• Strong professional documentation and communication skills.

Minimum Clearance Required to Start: Top Secret

Percentage of Travel Required: Up to 10%

Type of Travel: Local