Cyber Systems Engineer – Vulnerability Management
Arcfield
Springfield, VA · Posted November 4, 2026
Just laid off? Start here: a plan for the first weeks
See every open role at Arcfield
More in Virginia job market · Manufacturing & Industrial · Security jobs
More roles at Arcfield
- Field Service Engineer III – Opto-Mechanical Systems · Louisville, CO
- Ground Architecture Senior Systems Engineer · Chantilly, VA
- Information Assurance / Security Engineer - MID-Level · Middleton, RI
- Thermal Design Engineer V · Louisville, CO
- Instructional Systems Designer · McLean, VA
- Full Stack Developer · King George, VA
Where Springfield, VA ranks
Where Springfield, VA placed in our monthly rankings, month by month. Each month stays online at its own address.
November 2026
- #1Best cities for mid-career professionals76% · of 100
- #1Best cities for mid-career professionals in the Mid-Atlantic76% · of 85
- #1Best cities for mid-career professionals in the Southeast76% · of 87
- #11Best cities for pay after cost of living in Virginia$129k · of 15
- #13Best all-round cities for mid-career professionals in the Southeast54 / 100 · of 33
- #14Best all-round cities for mid-career professionals in the Mid-Atlantic55 / 100 · of 37
Rankings about security jobs
- Best cities for security jobs #1 San Francisco (316 openings)
- Best cities for security pay after cost of living #1 San Mateo ($241k)
- Most requested AI skills in security jobs #1 AI tools in daily work (10.8%)
- Employers with the most security jobs #1 Amazon (318 roles)
How AI is used in this kind of work
Among computer occupations, all other, AI is already used for a large share of the tasks. Measured exposure for computer occupations, all other: 31% (high).
Share of this job’s tasks that AI is already used for at work, from real usage. It is not a forecast of job loss, and a low number means no use seen yet. Source: Anthropic Economic Index.
Skills this job asks for
Say which you have and which you want to build. We use it to match you to jobs like this one.
About the job
Responsibilities
Program Description:
The program provides Systems Engineering and Technical Assistance (SETA) support in the areas of Cyber Security and Management to improve the Information Assurance (IA) posture of a National customer. The contracts support functions are: IA Management, Federal Information Security Management Act (FISMA) coordination and reporting, Risk Management Framework (RMF) application, IA compliance measurements and metrics, Assessment and Authorization (A&A), Vulnerability Management, and Cyber Defense support.
POSITION DESCRIPTION:
The Vulnerability Management Cyber SE provides support to the customer in the area of Cyber Security. Daily tasks include, but are not limited to:
Support the IT vulnerability management lifecycle.
Support government activities and reporting to appropriate IC and DoD authorities (i.e., USCYBERCOM, IC-SCC).
Assess and manage the implementation of identified corrections associated with high visibility technical vulnerabilities.
Using several database sources, collect the necessary metrics to develop and deliver a periodic Cyber Vulnerabilities Metrics Report.
Develop and deliver asset vulnerability views for categories such as mission, cross domain, and location, as required by the customer.
Develop cyber vulnerability analysis for known vulnerabilities, as well as cyber-related metrics and reporting deliverables.
Document and deliver awareness notices related to cyber vulnerabilities.
Document and deliver Government activities and reporting related to tasking and directions received from external stakeholders (i.e., USCYBERCOM, IC-SCC).
Coordinate and prepare Inspector General (IG) FISMA closure requests from field reps and program Information System Security Engineers (ISSEs).
Coordinate with RMF stakeholders on closure Body of Evidence (BoE) for Enterprise Vulnerability and Remediation (EVAR) tracked findings.
Prepare and update slides for weekly and monthly meetings.
Research trending vulnerabilities being reported through enterprise security tools.
Support the automation of current activities with system engineers and software developers from other groups and offices.
Ensure divisional processes are accurately documented and kept up to date.
Maintain representation of divisional activities and metrics via Confluence on a weekly basis.
Integrate analysis with intelligence and cyber operations functions.
Assist with the development of new processes and deliverables to support enterprise vulnerability analysis designed to inform the enterprise of existing vulnerabilities and help prioritize remediation efforts.
Qualifications
Required:
BS 10-12, MS 8-10, PhD 5-7
Must possess and be able to maintain a TS/SCI with Poly
Able to support customer’s core hours (0900-1500; Mon – Fri)
A Cyber Certification (DoD 8570/8140)
Familiarity with the IT vulnerability management lifecycle.
Excellent communications skills – Verbal and Non-Verbal
Strong analytic and risk management skills
Strong attention to detail and organizational skills
Self-starter requiring limited direction and supervision
Experience implementing RMF Process and NIST 800-53 technical controls, as well as developing and maintaining associated certification and accreditation documentation
Flexibility of schedule based on customer needs
Desired:
Bachelor of Science Degree in Science, Technology, Engineering or Mathematics (STEM) or an advanced IA certification
Experience supporting IT domain or IC experience with acquisition and project management
Experience briefing senior customer personnel
Ability to organize and prioritize numerous customer requests
Familiarity with customer's IA processes
Experience with SNOW, Splunk and ACAS
Familiarity with Cross Domain Systems (CDS)
Experience supporting IC or DoD in the Cybersecurity Domain
Equal Pay Act
This is the projected compensation range for this position. There are differentiating factors that can impact a final salary/hourly rate, including, but not limited to, Contract Wage Determination, relevant work experience, skills and competencies that align to the specified role, geographic location (For Remote Opportunities), education and certifications as well as Federal Government Contract Labor categories. In addition, Arcfield invests in its employees beyond just compensation. Arcfield ’s benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, Short Term and Long-Term Disability, Retirement and Savings, Learning and Development opportunities, wellness programs as well as other optional benefit elections.
Min: $133,901.35 Max: $232,828.46 EEO Statement
We are an equal opportunity employer and federal government contractor. We do not discriminate against any employee or applicant for employment as protected by law.
Program Description:
The program provides Systems Engineering and Technical Assistance (SETA) support in the areas of Cyber Security and Management to improve the Information Assurance (IA) posture of a National customer. The contracts support functions are: IA Management, Federal Information Security Management Act (FISMA) coordination and reporting, Risk Management Framework (RMF) application, IA compliance measurements and metrics, Assessment and Authorization (A&A), Vulnerability Management, and Cyber Defense support.
POSITION DESCRIPTION:
The Vulnerability Management Cyber SE provides support to the customer in the area of Cyber Security. Daily tasks include, but are not limited to:
Support the IT vulnerability management lifecycle.
Support government activities and reporting to appropriate IC and DoD authorities (i.e., USCYBERCOM, IC-SCC).
Assess and manage the implementation of identified corrections associated with high visibility technical vulnerabilities.
Using several database sources, collect the necessary metrics to develop and deliver a periodic Cyber Vulnerabilities Metrics Report.
Develop and deliver asset vulnerability views for categories such as mission, cross domain, and location, as required by the customer.
Develop cyber vulnerability analysis for known vulnerabilities, as well as cyber-related metrics and reporting deliverables.
Document and deliver awareness notices related to cyber vulnerabilities.
Document and deliver Government activities and reporting related to tasking and directions received from external stakeholders (i.e., USCYBERCOM, IC-SCC).
Coordinate and prepare Inspector General (IG) FISMA closure requests from field reps and program Information System Security Engineers (ISSEs).
Coordinate with RMF stakeholders on closure Body of Evidence (BoE) for Enterprise Vulnerability and Remediation (EVAR) tracked findings.
Prepare and update slides for weekly and monthly meetings.
Research trending vulnerabilities being reported through enterprise security tools.
Support the automation of current activities with system engineers and software developers from other groups and offices.
Ensure divisional processes are accurately documented and kept up to date.
Maintain representation of divisional activities and metrics via Confluence on a weekly basis.
Integrate analysis with intelligence and cyber operations functions.
Assist with the development of new processes and deliverables to support enterprise vulnerability analysis designed to inform the enterprise of existing vulnerabilities and help prioritize remediation efforts.
Required:
BS 10-12, MS 8-10, PhD 5-7
Must possess and be able to maintain a TS/SCI with Poly
Able to support customer’s core hours (0900-1500; Mon – Fri)
A Cyber Certification (DoD 8570/8140)
Familiarity with the IT vulnerability management lifecycle.
Excellent communications skills – Verbal and Non-Verbal
Strong analytic and risk management skills
Strong attention to detail and organizational skills
Self-starter requiring limited direction and supervision
Experience implementing RMF Process and NIST 800-53 technical controls, as well as developing and maintaining associated certification and accreditation documentation
Flexibility of schedule based on customer needs
Desired:
Bachelor of Science Degree in Science, Technology, Engineering or Mathematics (STEM) or an advanced IA certification
Experience supporting IT domain or IC experience with acquisition and project management
Experience briefing senior customer personnel
Ability to organize and prioritize numerous customer requests
Familiarity with customer's IA processes
Experience with SNOW, Splunk and ACAS
Familiarity with Cross Domain Systems (CDS)
Experience supporting IC or DoD in the Cybersecurity Domain