Cyber Security Project Engineer

Residency Status: ALL CANDIDATES MUST BE A U.S. CITIZEN

Security Clearance: ALL Candidates MUST currently Possess an Active TS/SCI w/FS polygraph for consideration of this position.

Time Type: Full-Time, Daytime Schedule – 100% onsite

Travel Reimbursement: Yes (within a 50-mile radius to the worksite)

Company Benefits: Yes

Close Date: Thursday, November 12, 2026

Company Overview:

NAOVI (Novel Applications, Inc.) is a premier technology services company that provides solutions in the areas of Cyber Security, Information Management and Systems Integration. NAOVI is a business that combines experience, creativity, flexibility, pragmatism, and cost-effective solutions in order to deliver measurable business value to our clients.

Headquartered in Fredericksburg, Virginia, NAOVI employs engineers, analysts, IT specialists and other professionals who strive to be the best at everything they do.

NAOVI is an AA/EEO Employer - Minorities/Women/Veterans/Disabled. Visit our company website at www.novelapplications.com to review and apply for our current openings.

Job Description

NAOVI is seeking a Cyber Security Project Engineer to support the following task:

Required Technologies/Tools

• All candidates will need to currently possess an Active TSSCI w/FS polygraph for consideration of this position. Required
• At this time our company Does Not offer clearance sponsorships for any of our positions.
• All candidates must be U.S. Citizens.
• Demonstrated experience (significant and current) on real-time prevention, detection, and remediation of cyberattacks on internet-facing systems.
• Demonstrated experience in either offensive (e.g., penetration testing, red teaming, ethical hacking) or defensive (e.g., security operations, incident response, threat hunting) cyber operations.
• Demonstrated experience (proficiency) in scripting languages (e.g., Python, PowerShell, Bash) for automation and analysis.
• Demonstrated experience with security information and event management (SIEM) systems (e.g., Splunk, QRadar, Elastic Stack)
• Demonstrated experience with AWS cloud logging such as CloudTrail and CloudWatch.
• Demonstrated experience with network protocols, packet capture analysis, and netflow analysis.
• Demonstrated experience with security event log analysis, including Windows event logging and Syslog.
• Demonstrated understanding of network protocols, operating systems (Windows, Linux), and cloud environments (AWS, Azure, GCP).
• Demonstrated experience with various attack vectors, exploitation techniques, and defensive countermeasures.
• Demonstrated experience with Authority and Accreditation (A&A) packages needed to obtain security approvals for system deployments into production state.
• Demonstrated experience reviewing assessment reports and assist projects in identifying security risks, including technical and non-technical, and developing effective mitigation strategies, including Plan of Action and Milestones (POA&Ms).
• Demonstrated experience assuring system components and software applications adhere to continuous monitoring and compliance with Security accesses and controls.
• Demonstrated experience reviewing and authoring System Security Plans (SSP), security requirements, and other supporting documentation for the A&A process.
• Demonstrated experience writing and reviewing NIST 800-53 controls.
• Demonstrated experience running and interpreting Rapid7 scans.
• Demonstrated experience working with Amazon Cloud security.
• Demonstrated experience with data visualizations tools (e.g. Tableau) to support development of visual dashboards to assist stakeholders with overwatch/monitoring of systems.
• Demonstrated experience working effectively independently and as part of a team in a fast-paced environment.

Desired Technologies/Tools

• Demonstrated experience with knowledge of information security standards such as ISO 27001 and NIST.
• Demonstrated experience with the ability to design, implement and maintain IDS/IPS technologies (Intrusion Detection System/Intrusion Prevention System).
• Demonstrated experience with common offensive security tools and methodologies (e.g., Metasploit, Nmap, Burp Suite, Cobalt Strike).
• Demonstrated experience processing software applications through the Agency’s approving channels to operate within the Agency’s Cloud offerings.
• Demonstrated experience working in a customer-facing environment.
• Demonstrated experience with Agency security policies and guidelines.
• Demonstrated exceptional analytical and problem-solving skills with the ability to dissect complex technical issues and propose effective solutions.
• Demonstrated experience working in the Agency’s secure cloud computing environment.

Active Relevant Certifications

OSCP, GIAC, CEH, BCPen, CompTIA CySA+, PenTest+, (ISC)2 CISSP, or CSSLP.

Other Relevant Technologies/Tools

• The Candidate shall deliver improvements in the overall cybersecurity posture of the Agency’s systems and applications including analysis and reporting on security data.
• The Candidate shall design, implement, and optimize security monitoring solutions to detect advanced persistent threats (APTs), malware, and other cyberattacks.
• The Candidate shall lead and participate in cyber incident response activities, including investigation, containment, eradication, and recovery.
• The Candidate shall develop and refine incident response playbooks and procedures.
• The Candidate shall conduct comprehensive vulnerability assessments and penetration tests to identify and prioritize security weaknesses.
• The Candidate shall evaluate the effectiveness of existing security controls on Agency systems and applications.
• The Candidate shall provide guidance on security system design and implementation to include recommending and implementing security controls, tools, and technologies to enhance defensive capabilities.
• The Candidate shall conduct deep dive analytics, perform assessments and audits, and inform network engineering decisions.
• The Candidate shall ensure all Agency systems are secured and accredited with the required Agency approval boards.
• The Candidate shall create and maintain the necessary documentation required for accreditation.
• The Candidate shall track action items related to accreditation, work with the Agency teams to complete the actions, and report status to the appropriate agency Stakeholders.
• The Candidate shall leverage Artificial Intelligence (Al) as applicable to support and investigate the security of agency systems and applications.
• The Candidate shall conduct overwatch and monitoring responsibilities in alignment with Agency’s policies.
• The Candidate shall conduct analysis on the agency’s system and application security data to identify issues and inform remediation steps and mitigations.
• The Candidate shall maintain accurate and detailed documentation of security incidents, vulnerabilities, and mitigation strategies.
• The Candidate shall educate Agency teams on cybersecurity best practices.
• The Candidate shall contribute to the development and refinement of cybersecurity policies, standards, and procedures.
• The Candidate shall support tasks requiring collecting, compiling, evaluating, and publishing information and statistical data included in documents, records, forms, reports, plans, policies, and regulations.
• The Candidate shall develop methods for tracking, monitoring, and reporting cyber-security-related metrics for Agency management consumption and use.