A Cyber Security Engineer designs systems that protect the security of large databases, including databases with customer information and patient files. Examines client computer systems, identifies weak points in security, develops and implements new systems, monitors and responds to security issues.
Goodfellow AFB, TX Job Details Full-time $72,000 - $82,000 a year 5 hours ago Benefits Paid holidays Health insurance Dental insurance Paid time off Vision insurance Opportunities for advancement Qualifications Test scanning software Vulnerability scanning implementation IT user and group management GPO Technical documentation Configuration management DoD experience Network infrastructure Desktop (troubleshooting support) Version control systems Compliance documentation Network support Technical writing Vulnerability management Desktop administration CompTIA Security+ Security technology solutions implementations
Security Testing Vuls Full Job Description Location:
Goodfellow Air Force Base, San Angelo, Texas Work Arrangement:
Primarily On-Site Clearance Required:
Active DoD Secret clearance or higher Advocate IT, LLC is a Maryland-based, SBA-certified Historically Underutilized Business Zone (HUBZone) small business and Disability-Owned Business Enterprise (DOBE) providing technology, operational, and customer engagement services to federal, state, and commercial clients. Headquartered in Frederick, Maryland, Advocate IT supports mission-critical programs in regulated environments where security, technical excellence, accuracy, and accountability matter. Advocate IT is seeking a Senior Cybersecurity / Gold Image Engineer to support a U.S. Air Force SIPRNet Thin Client and Network Infrastructure deployment at Goodfellow Air Force Base. This position combines the traditional responsibilities of a Gold Image/Systems Engineer and Cybersecurity/STIG Engineer , providing end-to-end ownership of Windows Master Gold Image engineering, system hardening, DISA STIG implementation, vulnerability scanning, remediation, testing, documentation, and security evidence development. Learn more at www.advocateitllc.com . Key Responsibilities Develop, configure, harden, test, and maintain Air Force-approved Windows Master Gold Images Develop and maintain at least two production-ready Master Gold Images using Government-provided or Government-approved baseline images Install and configure operating system components, applications, drivers, endpoint controls, and security configurations Apply and validate applicable DISA Security Technical Implementation Guides (STIGs) Perform Windows operating system and endpoint security hardening Conduct vulnerability and compliance scanning of Master Gold Images Analyze scan findings and perform technical remediation Support SCAP, ACAS, Tenable/Nessus, or comparable DoD vulnerability and compliance scanning activities Configure and validate Windows Group Policy, security baselines, registry settings, and local security policies Document security deviations, exceptions, compensating controls, and unresolved findings for Government review Support application integration and compatibility testing within the Master Gold Images Validate compatibility between Gold Images, VMware Horizon, VDI infrastructure, endpoint devices, and mission applications Coordinate closely with the Senior VDI/HCI Lead Engineer during image development and deployment Support implementation and validation of Government-provided endpoint security tools Perform patching, configuration changes, troubleshooting, and image remediation Establish repeatable image build, testing, version-control, and release processes Maintain technical and security documentation for production image releases Support pilot testing, production rollout, and Government acceptance testing Troubleshoot image-related issues identified during thin-client deployment Develop security evidence and compliance documentation supporting Government cybersecurity reviews Provide hands-on knowledge transfer to Air Force system administrators and cybersecurity personnel Participate in Integrated Product Team meetings, technical reviews, and project status discussions Minimum Qualifications Five (5) or more years of relevant cybersecurity, Windows systems engineering, endpoint security, or Gold Image engineering experience Strong hands-on experience administering and securing Microsoft Windows enterprise environments Experience creating, maintaining, or deploying standardized Windows operating system images Demonstrated experience applying and validating DISA STIGs Experience performing vulnerability scanning, analysis, remediation, and compliance validation Experience with Windows Group Policy, registry configuration, security baselines, and endpoint hardening Working knowledge of DoD cybersecurity, system-hardening, and configuration-management practices Ability to translate cybersecurity requirements into executable technical configurations Strong troubleshooting skills involving Windows operating systems, applications, policies, and security controls Experience developing technical, security, testing, and remediation documentation Ability to work collaboratively with virtualization, network, cybersecurity, and Government technical personnel Ability to perform primarily on-site work at Goodfellow Air Force Base Active DoD Secret security clearance or higher Preferred Qualifications Experience supporting SIPRNet, NIPRNet, or other classified DoD environments Experience supporting U.S. Air Force cybersecurity environments Experience with Windows Standard Desktop Configuration or comparable Government desktop baselines Experience using
DISA STIG
Viewer Experience with SCAP compliance scanning Experience with ACAS, Tenable, Nessus, or comparable vulnerability scanning tools Experience supporting VMware Horizon or other enterprise VDI environments Experience engineering Gold Images for virtual desktop environments Experience with Active Directory and Group Policy Objects Experience with DoD Risk Management Framework processes Experience supporting POA&M development, remediation tracking, or security-control evidence Security+, CySA+, CASP+, CISSP, or comparable DoD-recognized cybersecurity certification Experience conducting technical knowledge transfer to Government personnel Benefits Advocate IT offers competitive compensation and a strong benefits package, including: Health, dental, and vision insurance options Paid time off and holidays Professional development and training opportunities Cybersecurity certification and technical training support Career growth opportunities within a growing
HUBZone and Disability-Owned Business Enterprise Pay:
