Cyber Security Engineer
2 - 5 years
Camp Pendleton Mainside, CA
Full-time
Onsite
1 month ago
About the role
Company Description
SteelToad is a HUBZone-certified small business specializing in cybersecurity solutions, including cyber assessments, security services, and governance, risk, and compliance (GRC). With over 20 years of experience, we are ISO 9001, ISO 20000:1-2018, and ISO 27001:2022 certified and hold accreditations as a CMMC Third-Party Independent Assessment Organization (C3PAO). Focused on the public sector, we work closely with government agencies and the Defense Industrial Base (DIB) to tailor solutions that address regulatory compliance and security challenges. Our expertise spans frameworks such as NIST, HIPAA, RMF, and CMMC, with services like penetration testing, vulnerability management, and secure systems engineering ensuring optimal resilience and data protection.
Role Description
This is a full-time, on-site role based in San Diego, on our customer's site at Camp Pendleton, for a Cyber Security Engineer. The Cyber Security Engineer will be responsible for securing systems and applications, conducting vulnerability assessments, implementing cybersecurity best practices, and safeguarding network infrastructures. Daily tasks include analyzing threats, mitigating risks, ensuring regulatory compliance, and collaborating with cross-functional teams to enhance overall security posture.
TS/SCI required.
MCTSSA Based.
Start Date: 7/21/2026 Firm.
Minimum Position Requirements:· Five years of demonstrated experience in cybersecurity.
· Three years of demonstrated experience with malware or forensics and intrusion detection analysis.
· Two years of demonstrated experience with tools such as FTK, Wireshark, Autopsy, or similar technologies.
· One year of demonstrated experience with development of code in languages such as Python, Lau, C/C, Ruby or similar.
Desired Position Qualifications:· Information Assurance Technical (IAT) Level I or Level II certification.
· Bachelor’s degree in Cybersecurity or Computer Science or equivalent.
Tasks:· Recommend and implement hardware, software, or network solutions to resolve problems.
· Conduct administration, configuration, and support of IT infrastructure, to including operating systems, network components, and application security.
· Implementing STIG checklists across a wide range of technologies and writing and creating DoD cybersecurity policies and standard operating procedures (SOPs).
· Reviewing Windows, Linux, Cloud, network/applications STIGs, DoD Security Requirement Guides (SRGs) and vendor hardening guides.
· Running ACAS vulnerability scans.
· Generating reports and proposing remediation’s for open findings.
· Continuously monitor, report, and respond to any changes to the applications that may impact the applications’ security posture.
· Perform Cybersecurity daily operational support.
· Create and track audit reports and metrics, report issues to the Information System Security Manager.
· Support the investigation of cyber breaches.
· Assist in creating, maintaining, and implementing cybersecurity policy.
· Conduct analysis of multiple data sources to identify indicators of compromise.
· Draft client reports to explain findings and recommendations.
· Study and stay up to date with current cyber threats, attack tactics, and detection techniques.
· The ability to use either PowerShell, JavaScript, or Python to automate repetitive tasks.
· Collaborates with other cybersecurity engineers to review security or security-tool related issues, develop solutions, and make recommendations for addressing issues that impact many customers to lead solutions that meet security requirements.
SteelToad is a HUBZone-certified small business specializing in cybersecurity solutions, including cyber assessments, security services, and governance, risk, and compliance (GRC). With over 20 years of experience, we are ISO 9001, ISO 20000:1-2018, and ISO 27001:2022 certified and hold accreditations as a CMMC Third-Party Independent Assessment Organization (C3PAO). Focused on the public sector, we work closely with government agencies and the Defense Industrial Base (DIB) to tailor solutions that address regulatory compliance and security challenges. Our expertise spans frameworks such as NIST, HIPAA, RMF, and CMMC, with services like penetration testing, vulnerability management, and secure systems engineering ensuring optimal resilience and data protection.
Role Description
This is a full-time, on-site role based in San Diego, on our customer's site at Camp Pendleton, for a Cyber Security Engineer. The Cyber Security Engineer will be responsible for securing systems and applications, conducting vulnerability assessments, implementing cybersecurity best practices, and safeguarding network infrastructures. Daily tasks include analyzing threats, mitigating risks, ensuring regulatory compliance, and collaborating with cross-functional teams to enhance overall security posture.
TS/SCI required.
MCTSSA Based.
Start Date: 7/21/2026 Firm.
Minimum Position Requirements:· Five years of demonstrated experience in cybersecurity.
· Three years of demonstrated experience with malware or forensics and intrusion detection analysis.
· Two years of demonstrated experience with tools such as FTK, Wireshark, Autopsy, or similar technologies.
· One year of demonstrated experience with development of code in languages such as Python, Lau, C/C, Ruby or similar.
Desired Position Qualifications:· Information Assurance Technical (IAT) Level I or Level II certification.
· Bachelor’s degree in Cybersecurity or Computer Science or equivalent.
Tasks:· Recommend and implement hardware, software, or network solutions to resolve problems.
· Conduct administration, configuration, and support of IT infrastructure, to including operating systems, network components, and application security.
· Implementing STIG checklists across a wide range of technologies and writing and creating DoD cybersecurity policies and standard operating procedures (SOPs).
· Reviewing Windows, Linux, Cloud, network/applications STIGs, DoD Security Requirement Guides (SRGs) and vendor hardening guides.
· Running ACAS vulnerability scans.
· Generating reports and proposing remediation’s for open findings.
· Continuously monitor, report, and respond to any changes to the applications that may impact the applications’ security posture.
· Perform Cybersecurity daily operational support.
· Create and track audit reports and metrics, report issues to the Information System Security Manager.
· Support the investigation of cyber breaches.
· Assist in creating, maintaining, and implementing cybersecurity policy.
· Conduct analysis of multiple data sources to identify indicators of compromise.
· Draft client reports to explain findings and recommendations.
· Study and stay up to date with current cyber threats, attack tactics, and detection techniques.
· The ability to use either PowerShell, JavaScript, or Python to automate repetitive tasks.
· Collaborates with other cybersecurity engineers to review security or security-tool related issues, develop solutions, and make recommendations for addressing issues that impact many customers to lead solutions that meet security requirements.
Skills
Information TechnologyComputer and Network Security