Senior Cybersecurity & Compliance Engineer

Scientific Research Corporation (SRC) is seeking a Cybersecurity & Compliance Engineer to join our multidisciplinary team supporting the U.S. Space Command (USSPACECOM) transition to Huntsville, AL. This role is a critical component of the cybersecurity and Risk Management Framework (RMF) activities for both the temporary GSA facility enclaves and the long-term MILCON headquarters build-out. You will serve as a lead technical integrator, ensuring that all IT, Network, and Facility-Related Control Systems (FRCS) are designed, implemented, and authorized according to strict DoD and USSPACECOM cybersecurity requirements.

At SRC, we bring motivated, highly skilled, and creative people together to solve the government’s most dynamic problems with cutting-edge technology. We offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities.

• Defining Confidentiality, Integrity, Availability (CIA) thresholds as measurable KPPs
• Ensuring compliance with DoDI 8510.01 (RMF), NIST SP 800-53, DoD Cloud SRG, and enclave-specific requirements (NIPRNet, SIPRNet, JWICS)
• Advising on requirements gathering tools (Excel, DOORS, or recommended alternative) to support traceability and secure data handling
• Identifying and advises on trade-offs between performance and cybersecurity (e.g., resilience vs. confidentiality)
• Ensuring reciprocity and leverages NIWC/SETA prior requirements work where applicable

#LI-LH1

• Bachelors degree in Cybersecurity, IT, or Engineering
• 3–5 years of experience in DoD RMF (DoDI 8510.01 / NIST SP 800-53)
• Hands-on experience with eMASS or XACTA
• DoD 8140/8570 Compliance
• Mandatory IAT Level II certification; this position is a "Privileged Use" role
• Must hold a current Security+ CE or equivalent baseline certification

• Manage full-spectrum Assessment and Authorization (A&A) through all six steps of the RMF process in support of the Command-ISSM
• Directly develop and maintain a robust library of RMF artifacts, including System Security Plans (SSP), POA&Ms, and Security Assessment Reports (SAR) via eMASS and XACTA
• Experience providing cybersecurity oversight for IT, OT, and FRCS within high-security SCIF and SAP-F environments
• Conduct advanced vulnerability management activities, including ACAS/Nessus scan coordination, log analysis, and remediation validation
• Engineer the integration of Cyber Network Defense (CND) tools such as Trellix (HBSS/ePO) and endpoint protection platforms
• Ability to conduct technical reviews of network diagrams and system architectures to identify and mitigate compliance gaps early in the design phase
• Ability to implement Supply Chain Risk Management (C-SCRM) protocols for critical infrastructure entering secure facilities

SRC IS A CONTRACTOR FOR THE U.S. GOVERNMENT. THIS POSITION WILL REQUIRE U.S. CITIZENSHIP AS WELL AS A U.S. GOVERNMENT SECURITY CLEARANCE AT THE TOP SECRET / SCI LEVEL.

• Up to 10%

Scientific Research Corporation is an advanced information technology and engineering company that provides innovative products and services to government and private industry, as well as independent institutions. At the core of our capabilities is a seasoned team of highly skilled engineers and scientists with multidisciplinary backgrounds. This team is challenged daily to provide cutting edge technology solutions to our clients.

SRC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with a company match, life insurance, vacation and sick paid time off accruals starting at 10 days of vacation and 5 days of sick leave annually, 11 paid holidays, tuition reimbursement, and a work environment that encourages excellence and more. For positions requiring a security clearance, selected applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information.

Scientific Research Corporation is an equal opportunity employer that does not discriminate in employment.

All qualified applicants will receive consideration for employment without regard to their race, color, religion, sex, age, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other protected characteristic under federal, state or local law.

Scientific Research Corporation endeavors to make www.scires.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact jobs@scires.com for assistance. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.