Principal Cybersecurity Engineer

About This Role

This role is for a Principal Cybersecurity Engineer at Hanscom AFB, supporting the Air Force Life Cycle Management Center (AFLCMC/HBD) and critical Battle Management programs. The position involves designing, implementing, and maintaining robust cybersecurity measures for complex defense systems.

Responsibilities

• Assist with development of System Security Management Plans, Program Protection Plans, Security Risk Analyses, and other security engineering-related documents
• Support the system/application Authorization and Accreditation (A&A) effort in accordance with RMF
• Update, monitor, and manage information in systems for the program office
• Process and manage system user account requests, port/protocol, access control list requirements, and PKI identification
• Manage the distribution, implementation, remediation, and tracking of system security updates and configurations
• Recommend policies and procedures to ensure information systems reliability and prevent unauthorized access
• Conduct risk and vulnerability assessments of planned and installed information systems
• Promote awareness of security issues and ensure sound security principles are reflected in organizational goals
• Conduct systems security evaluations, audits, and reviews
• Participate in network and systems design to ensure appropriate systems security policies are implemented
• Obtain waivers to mandated security mechanisms/policies when detrimental to system performance or mission
• Provide leadership assistance in the analysis of the design, development, integration, implementation and testing of cybersecurity requirements

Requirements

• US Citizenship
• Ability to maintain Top Secret Level Clearance
• BS/BA Degree
• 15 years of experience in cybersecurity (10+ years in DoD)
• Proficiency in Risk Management Framework (RMF), taking projects from Step 1 to Step 5
• Proficiency in Vulnerability Management (Tenable Nessus/ACAS-DoD)
• Proficiency in STIGs

Qualifications

• BS/BA Degree
• 15 years of experience in technical/professional discipline, 10 of which must be in the DoD

Nice to Have

• Experience with Cross Domain Solutions and USAF CDS-E
• Cloud Service Models experience
• Supply Chain Security experience
• NIAP experience
• DoD Policies for Procedures for Cybersecurity knowledge
• Network Security experience
• Endpoint security experience
• DoD Impact Levels knowledge
• NSA Type 1 encryption experience
• Working with a CSSP 16th AF

Skills

* Required skills