[TM] Cyber Security Engineer - GCCS-J

Job Description

Job Description

Cyber Security Engineer - GCCS-J

Location: Newport News, VA - On-site Full-Time Required
Position Type: Full-Time
Clearance Requirement: Active Secret Clearance
Program: Global Command and Control System - Joint (GCCS-J)

GCCS-J is the DoD's Joint Command and Control system of record, providing a fused, real-time operational picture to commanders and warfighters. The modernization effort emphasizes secure cloud-native architecture, microservices, advanced data ingestion, improved data integrity, and alignment with JADC2 objectives. Cybersecurity is foundational to this effort, ensuring all software, systems, and infrastructure meet stringent DoD security, accreditation, and operational resilience requirements.

The Cyber Security Engineer supports and/or leads cybersecurity, Information Assurance (IA), and Risk Management Framework (RMF) activities within classified GCCS-J development and integration environments. This role is responsible for ensuring compliance with DoD cybersecurity standards, supporting secure system configurations, performing vulnerability assessments, and contributing to accreditation efforts.

The engineer collaborates closely with developers, testers, ISSMs/ISSOs, and government stakeholders to secure SIPR-based environments and integrate security practices across the software development lifecycle.

• Support and/or lead RMF activities, including security control implementation and accreditation efforts

• Ensure compliance with DoD IA controls, DISA STIGs, SRGs, and security baselines

• Support secure operation of SIPR-based development and integration environments

• Perform system hardening, patching, and secure configuration management

• Conduct vulnerability scans, compliance checks, and security assessments

• Document findings, track remediation, and validate corrective actions

• Support and guide secure coding practices and secure architecture design

• Review software, data flows, and system configurations for security risks