Senior Cybersecurity Engineer

Description

• Lead and manage a team of cybersecurity professionals, providing guidance, training, and support to team members to foster a culture of continuous improvement and cybersecurity awareness within the team.
• Develop, implement, and manage cutting-edge cybersecurity strategies and plans to secure applications and data migrating to commercial cloud environments.
• Conduct risk assessments and vulnerability analyses for applications and systems.
• Oversee the A&A process for applications migrating to the cloud, ensuring all RMF requirements by preparing and reviewing ATO-related documentation and artifacts.
• Lead continuous vulnerability management, including security scans, patch management, and mitigation of identified risks.
• Develop and manage cyber incident response plans, and procedures and post incident-analysis. 

LOCATION: Hanscom AFB in Bedford, MA and/or remote within driving distance (Hybrid) 

Requirements

• Active DoD Secret security clearance.
• BS degree in Computer Science, Cybersecurity, Information Assurance, or a related field.
• Minimum of 10 years of experience progressive experience in cybersecurity, with a strong background in various domains such as network security, application security, and cloud security.
• Strong familiarity with cloud security concepts and technologies in DOD authorized IL 2, 4/5, and 6 cloud environments across four Cloud Service Providers (Amazon Web Services, Microsoft Azure, Oracle Cloud Infrastructure, and Google Cloud Platform).
• Hands-on experience in developing and implementing RMF framework and A&A processes, specifically focused on developing SSP packages for achieving ATO for DoD applications / systems.
• Demonstrated track record of working as part of a modern DevSecOps team, leading new processes and tooling to continuously improve the security posture with an automation-first mindset, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), CI/CD pipelines, and security inheritance frameworks across cloud services.
• Hands-on experience in implementing a Secure Cloud Computing Architecture (SCCA) for at least one CSP
• Familiarity with data security requirements aligned with DoD and USAF cybersecurity policies, standards, and frameworks, including NIST SP 800-53, RMF, and CISA guidelines.