Principal Cybersecurity Engineer

Location: Hanscom AFB, Bedford, Massachusetts, United States; onsite role

Salary: $170,000–$185,000 annually, depending on experience, certifications, and qualifications.

Company

Provides cybersecurity and acquisition program support for Air Force Life Cycle Management Center programs covering communications, command and control, intelligence, surveillance, reconnaissance, air defense, and related mission systems.

What you will do

• Lead the development and review of system security management plans, program protection plans, security risk analyses, OPSEC plans, and security CONOPS.
• Support authorization and accreditation activities under the Risk Management Framework, including ATO, ATC, reciprocity, continuous monitoring, and eMASS package administration.
• Provide cybersecurity leadership for DoD and joint network and system architecture, cross-domain solutions, CSfC, and NSA approval processes.
• Assess and mitigate vulnerabilities through ACAS scanning, Tenable Nessus, STIG implementation, security configuration changes, and compensating controls.
• Support acquisition program security, classified information management, security classification guides, source selections, and contractor data reviews.
• Advise government and commercial stakeholders, support risk-based security decisions, and develop cybersecurity awareness and training programs.

Requirements

• Must be a US citizen and able to maintain a Top Secret clearance.
• BS or BA degree.
• 20 years of experience in the relevant technical or professional discipline, including 10 years in the Department of Defense.
• Experience with Risk Management Framework implementation from Step 1 through Step 5, vulnerability management, Tenable Nessus/ACAS, and STIGs.
• CISSP certification required.
• Onsite work at Hanscom AFB in Bedford, Massachusetts; limited travel may be required.

Nice to have

• Experience with Cross Domain Solutions and USAF CDS-E.
• Knowledge of cloud service models, supply chain security, NIAP, DoD cybersecurity policies, network and endpoint security, and DoD impact levels.
• Experience with NSA Type 1 encryption and CSSP support for the 16th Air Force.

Culture & Benefits

• Full-time position supporting Air Force mission systems and government stakeholders.
• Limited travel as needed.
• Work focuses on classified information, acquisition security, cybersecurity compliance, and mission assurance.