𝐒𝐭𝐞𝐞𝐥𝐓𝐨𝐚𝐝 | A Cybersecurity Firm Focused on Mitigating Risk, Increasing Resilience, & Locking Down Organizational Data, while ensuring Regulatory Compliance.

✓ HUBZone Certified Small Business

𝗖𝗔𝗚𝗘 𝗖𝗼𝗱𝗲: 8DTM7
𝗨𝗘𝗜: MLK6AHF6VHW4

𝗦𝗢𝗟𝗨𝗧𝗜𝗢𝗡𝗦
🎯 Cyber Assessments
🎯 Security Services
🎯 Governance, Risk, Compliance (GRC)

𝗗𝗜𝗙𝗙𝗘𝗥𝗘𝗡𝗧𝗜𝗔𝗧𝗢𝗥𝗦 | SteelToad employees have over 20+ years of experience in Cybersecurity. We hold GSA MAS - HACS SIN and Seaport NxG. We are ISO 9001, ISO 20000:1-2018, ISO 27001:2022 accredited to perform NIST SP 800-53 / 800-30 / 800-66. We are CMMI Appraisers holding CMMI Dev 3 and SVC 3. SteelToad is a CMMC 3rd Party Independent Assessment Organization (C3PAO) and A2LA Accrediated. We understand the unique challenges and complexities of the public sector and work closely with the DIB and government agencies to design and implement customized solutions that address their specific needs.

CMMC, NIST, RMF, HIPAA, NIST SP 800-53, NIST SP 800-30, NIST SP 800-66, CMMI Assessments, Zero Trust Maturity Model, CISA Cyber Resilience Review, Red Team, Blue Team, Purple Team, Penetration Testing, Vulnerability Management, Secure Systems Engineering, Security Technical Guidelines, Risk Management Framework (RMF), FISMA, Security Policy & Procedure Management, Security Control Assessment (SCA), Continuous Monitoring, Security Assessment, Authorization Package, Authority to Operate (ATO), Governance, Risk, Compliance (GRC), Security Assessment

Industry: Computer and Network Security
Company Size: 11-50 employees

SteelToad

Savvy Admin PROD

**Company Description **

SteelToad is a HUBZone-certified small business specializing in cybersecurity solutions, including cyber assessments, security services, and governance, risk, and compliance (GRC). With over 20 years of experience, we are ISO 9001, ISO 20000:1-2018, and ISO 27001:2022 certified and hold accreditations as a CMMC Third-Party Independent Assessment Organization (C3PAO). Focused on the public sector, we work closely with government agencies and the Defense Industrial Base (DIB) to tailor solutions that address regulatory compliance and security challenges. Our expertise spans frameworks such as NIST, HIPAA, RMF, and CMMC, with services like penetration testing, vulnerability management, and secure systems engineering ensuring optimal resilience and data protection.

**Role Description **

This is a full-time, on-site role based in San Diego, on our customer's site at Camp Pendleton, for a Cyber Security Engineer. The Cyber Security Engineer will be responsible for securing systems and applications, conducting vulnerability assessments, implementing cybersecurity best practices, and safeguarding network infrastructures. Daily tasks include analyzing threats, mitigating risks, ensuring regulatory compliance, and collaborating with cross-functional teams to enhance overall security posture.

TS/SCI required.

MCTSSA Based.

Start Date: 7/21/2026 Firm.

Minimum Position Requirements:·      Five years of demonstrated experience in cybersecurity.

·      Three years of demonstrated experience with malware or forensics and intrusion detection analysis.

·      Two years of demonstrated experience with tools such as FTK, Wireshark, Autopsy, or similar technologies.

·      One year of demonstrated experience with development of code in languages such as Python, Lau, C/C, Ruby or similar.

Desired Position Qualifications:·      Information Assurance Technical (IAT) Level I or Level II certification.

·      Bachelor’s degree in Cybersecurity or Computer Science or equivalent.

Tasks:·      Recommend and implement hardware, software, or network solutions to resolve problems.

·      Conduct administration, configuration, and support of IT infrastructure, to including operating systems, network components, and application security.

·      Implementing STIG checklists across a wide range of technologies and writing and creating DoD cybersecurity policies and standard operating procedures (SOPs).

·      Reviewing Windows, Linux, Cloud, network/applications STIGs, DoD Security Requirement Guides (SRGs) and vendor hardening guides.

·      Running ACAS vulnerability scans.

·      Generating reports and proposing remediation’s for open findings.

·      Continuously monitor, report, and respond to any changes to the applications that may impact the applications’ security posture.

·      Perform Cybersecurity daily operational support.

·      Create and track audit reports and metrics, report issues to the Information System Security Manager.

·      Support the investigation of cyber breaches.

·      Assist in creating, maintaining, and implementing cybersecurity policy.

·      Conduct analysis of multiple data sources to identify indicators of compromise.

·      Draft client reports to explain findings and recommendations.

·      Study and stay up to date with current cyber threats, attack tactics, and detection techniques.

·      The ability to use either PowerShell, JavaScript, or Python to automate repetitive tasks.

·      Collaborates with other cybersecurity engineers to review security or security-tool related issues, develop solutions, and make recommendations for addressing issues that impact many customers to lead solutions that meet security requirements.

Cyber Security Engineer

Find your dream job with Savvy AI Recruiter. Browse thousands of opportunities from top companies. Our AI-powered system matches you with roles that fit your skills and experience.