11 grc engineer jobs at 8 companies in Culpeper, VA
2w
Save
Mark Applied
Hide
2w
GRC Engineer III
Fairfax or Lafayette or Knoxville
$144k-$311k/yrHybridFull Time
CGINYSE: GIB: Provides information technology and business consulting services.
9+ YOEBachelor's in cyber field, 9+ years relevant experience, experience with ServiceNow/Archer/eMASS, RMF automation, FAIR, AI governance familiarity, strong communication and executive engagement skills.
LTS: An enterprise consulting and IT modernization firm delivering healthcare IT solutions for federal agencies and public organizations.
5+ YOEBachelor's degree, ability to obtain Public Trust, 5+ years cybersecurity engineering experience in federal or regulated/cloud environments, AWS security, RMF/ATO, eMASS/ServiceNow GRC, NIST/FedRAMP/DISA STIGs, and DevSecOps/CI/CD familiarity.
WorkdayNASDAQ: WDAY: Provides cloud-based software for financial and human capital management.
9+ YOE9+ years in building GRC platforms; proficient in Python/Go/Java; strong SDLC governance; architecture, data models, API design; leads technical roadmaps; experience automating risk data.
Python, Go, Java, Git, APIs, ETL, Data Modeling, NIST, FAIR
CGINYSE: GIB: Provides information technology and business consulting services.
5+ YOE5+ years ServiceNow development experience, bachelor\u0002s in CS/IT or equivalent, proficiency in JavaScript/Glide API/Jelly/AngularJS/UI Builder/Flow Designer, experience with ITSM/ITOM/CMDB/HAM/GRC, API integration experience.
Zermount: Provides cybersecurity and IT consulting services to government agencies.
5+ YOEActive Secret clearance, 5+ years US government cybersecurity experience, 4+ years RMF/ISSO/GRC technical validation, hands-on across cloud/network/systems/databases, required security certification (e.g., CISSP/CISM/CISA/CAP/CCISO/CGRC).
Tenable, Qualys, CrowdStrike, Splunk, Microsoft Sentinel, IBM QRadar, Ansible, Terraform, Puppet, Archer, ServiceNow, NIST RMF, FISMA, EO 14028, FIPS 199, TIC 3.0, NIST 800-207
Zermount: Provides cybersecurity and IT consulting services to government agencies.
7+ YOE7+ years cybersecurity experience supporting U.S. Government systems, 4+ years performing RMF/ISSO/assessment/GRC functions, active Secret clearance, hands-on validation of security controls, deep knowledge of NIST RMF/Zero Trust, and one of several industry security certifications.
Tenable, Qualys, CrowdStrike, Splunk, Microsoft Sentinel, IBM QRadar, Ansible, Terraform, Puppet, Archer, ServiceNow
ASRC Federal: Provides engineering and IT services to federal government agencies.
5+ YOE5+ years Power Platform development experience, Power Apps/Power Automate/SharePoint proficiency, ability to integrate SIEM/EDR/GRC data, Power Fx and SQL proficiency, active Secret clearance, meet DoD 8570 IAM/IAT Level I certification.
Power Apps, Power Automate, SharePoint, Tenable, ACAS, eMASS, XACTA, CrowdStrike, Splunk, Elastic, Power Fx, SharePoint Online, Microsoft Dataverse, SQL, Excel
SMX: Providing cloud, cybersecurity, and mission-focused technology solutions to government.
5+ YOE5+ years cybersecurity experience with 3+ years federal cloud security/RMF support, bachelor’s in related field or equivalent, U.S. citizenship and ability to obtain Secret clearance, strong documentation and stakeholder skills.
Senior Security Compliance Automation Engineer - Federal (Reston, VA, US, 20191)
Reston, Virginia, United States
$131k-$272k/yrHybridFull Time
SAPFrankfurt Stock Exchange: SAP: Sells enterprise resource planning and business management software solutions.
5+ YOE5+ years experience in security compliance, controls or automation; FedRAMP/FISMA/NIST knowledge; hands-on automation with Python, PowerShell, SQL and APIs; dashboard and data pipeline experience; strong documentation and communication skills.
CACI InternationalNYSE: CACI: Provides information technology and engineering services for government agencies.
2+ YOEUS citizen with current TS/SCI clearance; Associate degree in Electronics + 2 years relevant experience (or 4 years military MI systems experience); experience with GRCS/EMARSS/DCGS-A and related C4ISR systems; ability to lift 50 lbs; TMDE use and local travel up to 25%.
NIPRNet, SIPRNet, JWICS, TDN2, Special Access Programs (SAP), Guardrail Common Sensor (GRCS), Enhanced Medium Altitude Reconnaissance Surveillance System (EMARSS), Tactical Command Data Link (TDCL), GRCS Operational Ground Station (OGS), Distributed Common Ground Station- Army (DCGS-A), software defined SIGINT collection platforms, TROJAN systems, TENCAP systems, satellite communication terminals, TMDE, multi-meters, oscilloscopes, signal generators, spectrum analyzers, bit error rate testers (BERT)
CACINYSE: CACI: Provides information technology and professional services to government clients.
2+ YOEUS citizen with active TS/SCI clearance, associate degree in electronics + 2 years relevant experience (or 4 years military training), experience with C4ISR systems (e.g., GRCS, EMARSS), use of TMDE and RF/optical test equipment, ability to lift up to 50 lbs, up to 25% local travel.
NIPRNet, SIPRNet, JWICS, TDN2, Special Access Programs (SAP), Guardrail Common Sensor (GRCS), Enhanced Medium Altitude Reconnaissance Surveillance System (EMARSS), Tactical Command Data Link (TDCL), GRCS Operational Ground Station (OGS), Distributed Common Ground Station- Army (DCGS-A), Test Measurement and Diagnostic Equipment (TMDE), multi-meters, oscilloscopes, signal generators, spectrum analyzers, bit error rate testers (BERT), BERT