ERG is a research and consulting firm that provides a wide range of support to federal, state, and commercial clients. ERG offers multidisciplinary teams with nationally recognized skills in engineering, science, economics, public health, informational technology, and communications. We hire people with the best minds and then provide them with a vibrant and flexible environment in which to develop their careers. The qualified individual must be highly motivated with the skills to prioritize, perform, and communicate effectively in a fast-paced environment.
ERG is seeking a Senior Cyber Specialist to provide advanced cybersecurity expertise in support of U.S. Navy systems, networks, and mission-critical data. The ideal candidate will play a key role in strengthening the Navy’s cybersecurity posture through proactive defense, continuous monitoring, and compliance with DoD cybersecurity frameworks. This is a fulltime onsite position at the Naval Surface Warfare Center (NSWC) Indian Head. Indian Head, MD, is approximately 30 miles from Washington, DC, 25 miles from Alexandria, VA, and 60 miles from Fredericksburg, VA.
Implement and monitor Risk Management Framework (RMF) controls to ensure compliance with DoD cybersecurity requirements
Conduct vulnerability assessments, analyze results, and lead remediation efforts to improve system security
Support the Authorization to Operate (ATO) process, including documentation development, package maintenance, continuous monitoring, and compliance reporting
Identify, evaluate, and respond to cybersecurity threats, incidents, and anomalies affecting Navy systems and networks
Collaborate with cybersecurity, engineering, and program teams to ensure secure architectures and effective risk mitigation strategies
Maintain and update cybersecurity documentation, including System Security Plans (SSPs), POA&Ms, and related artifacts
Provide expert recommendations to stakeholders on cybersecurity best practices, threat intelligence, and defensive operations
Stay current on emerging threats, tools, and DoD cybersecurity policies to ensure proactive system protection
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field
8+ years of professional cybersecurity experience supporting DoD or federal information systems
DoD 8570/8140 IAT or IAM Level III certification (e.g., CISSP, CASP+, or equivalent)
Extensive experience with RMF, NIST SP 800-series guidelines, and DoD cybersecurity compliance
Familiarity with Navy cybersecurity tools, eMASS, ACAS, HBSS, and A&A packages
Strong knowledge of vulnerability scanning tools, incident response processes, and defensive cyber operations
Excellent analytical, communication, and documentation skills
Must currently hold or maintain a Department of Defense T5 investigation/privileged access eligibility (T5 (SSBI) clearance)
Must be a U.S. citizen as this position is not eligible for Limited Access Authorizations
Experience directly supporting U.S. Navy systems, platforms, or networks
Advanced knowledge of secure system engineering, network defense, and emerging cyber threats
Knowledge of 5G wireless, Software Defined Networks (SDNs), and IPv6 transition