We are looking for a Cyber Security Engineerto join our client’s team. Client: Federal Duration: 4–6 months Location: Onsite at multiple CONUS bases; 75% travel Clearance: Active Secret required Travel Included but billed seperately. Role Summary The Cyber Security Engineer is a hands-on engineer who configures and runs the Comply-to-Connect (C2C)/NAC platform at the base. This role closes Step 1–3 gaps, builds and tunes policies, and executes Step 4 enforcement waves. Work is directed by the Program team, which defines deliverables. Key Responsibilities - Close remaining device discovery, classification, and interrogation gaps on the NAC platform.
- Build and test posture checks and auto-remediation policies, validating on a pilot group before expanding.
- Configure and validate integrations with ACAS, endpoint security/EDR, AD, SIEM, and ticketing.
- Enable monitor mode, analyze failures, and tune policies before enforcement.
- Execute enforcement waves with the network engineer, triaging failures and rolling back quickly when needed.
- Identify, categorize, and document exception devices, and support the base in obtaining waivers.
- Document configurations, policies, and runbooks for handoff to base staff.
Required Qualifications - 5–8 years in cybersecurity, including 2+ years enforcing NAC policy in production.
- Active Secret clearance.
- Production experience administering and enforcing policy on a NAC platform (Forescout or Cisco ISE, matching the base) at a scale of thousands of endpoints.
- Solid understanding of 802.1X, MAB, RADIUS, Active Directory/GPO, and PKI/certificate deployment.
- Familiarity with STIGs, SCAP, ACAS/Tenable, and endpoint security tools.
- Scripting or automation experience (PowerShell, Python, or REST APIs).
- Comfortable working in a live DoD environment with strict change control.
- Willingness and ability to travel 75% of the time to multiple CONUS locations.
Preferred Qualifications - Experience on DoD/DISA C2C deployments.
- Experience in a base NOC or with a base cyber/comm squadron.
- Experience with SIEM/log analysis and troubleshooting user impact.
Certifications - Security+ (baseline, required)
- CISSP, CEH, or CySA+ (preferred)
- Forescout Certified Administrator/Engineer or Cisco ISE/CCNP Security (preferred)
ECCO Select is committed to hiring and retaining a diverse workforce. Our policy is to provide equal opportunity to all people without regard to race, color, religion, national origin, ancestry, marital status, veteran status, age, disability, pregnancy, genetic information, citizenship status, sex, sexual orientation, gender identity or any other legally protected category. Veterans of our United States Uniformed Services are specifically encouraged to apply for ECCO Select opportunities. |
