Cybersecurity Engineer

GovCIO is currently hiring a Cybersecurity Engineer to support Information Assurance (IA), Information System Security Officer (ISSO), and system patching activities for the U.S.

Coast Guard (USCG) International Ice Patrol.

This technical role focuses on maintaining cybersecurity posture, managing vulnerability remediation, and developing critical compliance artifacts to secure the Ice Patrol's local network and support the modernization of the Ice Patrol's core application, BAPS.

This position is strictly located on-site in Suitland, Maryland.

The team offers flexible scheduling with preferred afternoon shifts or start times from 10:00 AM onwards to align with civilian IT hours.

This position is located in Suitland, MD and is an onsite position.

• Support IA/ISSO artifacts by developing, updating, and maintaining Risk Management Framework (RMF) documentation, System Security Plans (SSP), and Security Assessment Reports (SAR) to assist BAPS through the RMF pipeline toward a full Authorization to Operate (ATO).
• Coordinate vulnerability tickets through tracking, prioritizing, and managing Plan of Action and Milestones (POA&M) items to closure.
• Complete and maintain security documentation and system upkeep within the Enterprise Mission Assurance Support Service (eMASS).
• Perform hands-on technical testing, run security scans, and produce artifacts showing evidence of meeting mandatory security controls.
• Execute network and local machine security patching on the on-site local area network (LAN) for approximately 16 hours per week.
• Lead local hardware deployment projects, including configuring, imaging, and setting up WIN 10 replacement computers.
• Engage stakeholders for implementation of security controls, collaborating closely with the GS-13 International Ice Patrol leadership.

High School with 9+ years (or commensurate experience)

• Certifications: DoD 8570 IAT Level II or higher (e.g., Security+ CE, CySA+, or equivalent).
• Experience in a cybersecurity, engineering, system administration, or network support role.
• Proven track record tracking vulnerability tickets, managing POA&Ms, and executing technical remediation schedules.
• Experience running security scans, managing security documentation, and producing compliance artifacts.