Job Requirements
Fairfax, VA
Secret Polygraph Unspecified
Career Level not specified
Salary not specified
Join Premium to unlock estimated salaries 
Job Description
Job Description Position Summary
ECS is seeking a Cybersecurity Engineer (CDAP) - Senior to support the Army National Guard (ARNG) Enterprise Network Operations and Cybersecurity Support (ENOCS) program. This role supports Task 3 - Cybersecurity Operations Support by implementing and maintaining CDAP data ingestion pipelines, connectors, and analytic components that enable enterprise security monitoring across the ARNG environment. The Cybersecurity Engineer (CDAP) assists with platform configuration, troubleshooting, performance validation, dashboard integration, and configuration change documentation, helping deliver the continuous monitoring, threat detection, and cybersecurity engineering outcomes required for Defensive Cyberspace Operations - Internal Defensive Measures (DCO-IDM). The position works in coordination with broader cybersecurity operations personnel, including SOC, data feed, engineering, compliance, and RMF support functions.
In this role, the selected candidate will help sustain cybersecurity visibility for an enterprise that supports more than 120,000 users and approximately 141,000 endpoints across about 2,800 sites in 54 states and territories. The position contributes to cybersecurity operations supporting both classified and unclassified network environments, aligned to ARNG Title 10 and Title 32 missions, mobilization readiness, domestic emergency response, and SIPRNet-enabled operations. The technical environment includes integrated SIEM/C2C/DLP analytics, USIEM-enabled monitoring and analytics, endpoint and network data sources, continuous monitoring aligned with RMF, and coordination with organizations such as the NETCOM Global Cyber Center and DISA DCDC to strengthen cyber visibility and reporting across the DoDIN-Army-NG area of responsibility.
Please Note: This position is contingent upon contract award.
Responsibilities
U.S. Citizenship is required
Security Clearance: Secret Eligible
Required Certifications: DCWF Work Role 631-Information Systems Security Developer - Basic proficiency; must hold ONE OR MORE of the following: CC, CND, GISF, SSCP
Experience: 3+ years of experience in cybersecurity
Security Clearance: Active Secret (preferred)
ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.
is the federal segment of , a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.
Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.
We value:
ECS is seeking a Cybersecurity Engineer (CDAP) - Senior to support the Army National Guard (ARNG) Enterprise Network Operations and Cybersecurity Support (ENOCS) program. This role supports Task 3 - Cybersecurity Operations Support by implementing and maintaining CDAP data ingestion pipelines, connectors, and analytic components that enable enterprise security monitoring across the ARNG environment. The Cybersecurity Engineer (CDAP) assists with platform configuration, troubleshooting, performance validation, dashboard integration, and configuration change documentation, helping deliver the continuous monitoring, threat detection, and cybersecurity engineering outcomes required for Defensive Cyberspace Operations - Internal Defensive Measures (DCO-IDM). The position works in coordination with broader cybersecurity operations personnel, including SOC, data feed, engineering, compliance, and RMF support functions.
In this role, the selected candidate will help sustain cybersecurity visibility for an enterprise that supports more than 120,000 users and approximately 141,000 endpoints across about 2,800 sites in 54 states and territories. The position contributes to cybersecurity operations supporting both classified and unclassified network environments, aligned to ARNG Title 10 and Title 32 missions, mobilization readiness, domestic emergency response, and SIPRNet-enabled operations. The technical environment includes integrated SIEM/C2C/DLP analytics, USIEM-enabled monitoring and analytics, endpoint and network data sources, continuous monitoring aligned with RMF, and coordination with organizations such as the NETCOM Global Cyber Center and DISA DCDC to strengthen cyber visibility and reporting across the DoDIN-Army-NG area of responsibility.
Please Note: This position is contingent upon contract award.
Responsibilities
- Implement and maintain CDAP data ingestion pipelines, connectors, and analytic components that support enterprise security monitoring across ARNG classified and unclassified environments.
- Configure and troubleshoot CDAP platform components to ensure reliable telemetry flow, analytic performance, and operational reporting in support of Task 3 cybersecurity operations deliverables.
- Validate platform performance and data quality to support continuous monitoring objectives, dependable telemetry ingestion, and accurate security dashboards.
- Integrate dashboard outputs and reporting components to improve visibility for cybersecurity operations, data feed support, and threat-informed analysis.
- Document configuration changes, validation results, and supporting technical artifacts to maintain traceability and support RMF-aligned continuous monitoring requirements.
- Support testing and verification activities for connectors, analytics, and reporting components before operational use or release into the monitoring environment.
- Contribute to integrated SIEM/C2C/DLP analytics by helping sustain data feeds and analytic visibility that support USIEM monitoring and enterprise cyber reporting.
- Coordinate technical activities with cybersecurity operations teams supporting the SOC and related monitoring functions, including alignment with NETCOM Global Cyber Center and DISA DCDC processes as applicable.
- Assist in maintaining telemetry and reporting capabilities that support cybersecurity operations for approximately 120,000 users and 141,000 endpoints across 2,800 sites in 54 states and territories.
U.S. Citizenship is required
Security Clearance: Secret Eligible
Required Certifications: DCWF Work Role 631-Information Systems Security Developer - Basic proficiency; must hold ONE OR MORE of the following: CC, CND, GISF, SSCP
Experience: 3+ years of experience in cybersecurity
- Experience implementing or sustaining data ingestion pipelines, connectors, or analytic components used for enterprise security monitoring.
- Experience supporting platform configuration, troubleshooting, and performance validation in a cybersecurity operations environment.
- Experience documenting configuration changes, test results, and technical artifacts in support of controlled operational environments.
- Familiarity with continuous monitoring practices aligned to RMF requirements and security reporting objectives.
- Experience supporting dashboard integration or telemetry reporting functions for cybersecurity stakeholders.
- Ability to work onsite in Fairfax, VA in an in-person environment five days per week.
Security Clearance: Active Secret (preferred)
- Familiarity with USIEM, SIEM/C2C/DLP analytics, or comparable enterprise monitoring environments supporting cyber operations.
- Experience supporting cybersecurity operations within DoD or Army enterprise environments with both classified and unclassified enclaves.
- Experience working with telemetry or analytic data sources used for threat detection, correlation, and enterprise reporting.
- Familiarity with ARNG, NETCOM, DISA, or RCC/GCC-coordinated cyber operations processes.
- Experience supporting RMF-related evidence collection, validation testing, or continuous monitoring documentation in operational environments.
ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.
is the federal segment of , a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.
Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.
We value:
- Attracting and developing top talent and high-performing teams
- Fostering a culture that is engaging, accountable, and mission-driven
group id: 10112231A