Senior Cyber Security Engineer

The Senior Cyber Security Engineer will assist with cybersecurity engineering and ISSE-focused activities for Unattended Ground Sensor (UGS) and operational technology systems. This onsite role in Ashburn, VA supports lab validation work and coordination for CBP cybersecurity, CSD, and field-alignment planning, including security readiness, vulnerability scanning, and ATO evidence documentation.

Key Responsibilities

• Provide cybersecurity engineering and ISSE support for UGS and operational technology systems, emphasizing lab validation, security readiness, and documentation.
• Support CSD VAT/Nessus scan readiness by covering asset identification, scan scope, credential availability, scan limitations, vendor constraints, and device impact considerations.
• Support CSD SOC/Splunk readiness by identifying available telemetry, log sources, logging limitations, monitoring requirements, and security-relevant events.
• Assist with firmware and software update validation, including security update review, vendor release note review, checksum or hash validation, and security impact tracking.
• Document vulnerabilities, findings, limitations, remediation actions, compensating controls, and retest results to support lab validation and ATO-related evidence.
• Contribute security input to lab test plans, validation packages, acceptance recommendations, and Phase 2 handoff materials.
• Support configuration and change management by assessing whether proposed changes affect validated baselines, security posture, scanning requirements, monitoring, or field-alignment readiness.
• Coordinate with stakeholders to support secure integration and validation of UGS technologies.
• Maintain security-related documentation, including scan readiness checklists, security considerations, vulnerability tracking, and ATO evidence inputs.
• Provide security guidance to lab team members and support security audits, assessments, and evidence requests as needed.
• Support lab incident and security event handling by documenting security events, assessing validation impact, preserving evidence, and coordinating with appropriate stakeholders.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field; equivalent experience may be considered.
• Minimum of 5 to 7 years of experience in cybersecurity, security engineering, ISSE, vulnerability management, or security assessment roles.
• Experience supporting RMF, ATO, POA&M, security control evidence, vulnerability remediation, or continuous monitoring activities.
• Experience with vulnerability scanning tools such as Tenable Nessus or an equivalent tool.
• Familiarity with SIEM and logging platforms such as Splunk, including the ability to identify useful telemetry and log sources.
• Experience assessing or supporting network-connected devices, embedded systems, operational technology, IoT, cameras, sensors, or field technology environments.
• Understanding of security hardening, firmware and software update validation, configuration baselines, change control, and risk documentation.
• Ability to document technical findings, limitations, test results, and security recommendations clearly for technical and program stakeholders.
• Ability to coordinate across cybersecurity, engineering, network, test, vendor, and program teams.
• Strong analytical, troubleshooting, and communication skills.
• Experience with DHS/CBP environments, NIST, FISMA, RMF, or federal cybersecurity requirements preferred.

Technology & Tools

• Tenable Nessus
• Splunk

Location, Work Setting, and Clearance

• Location: Ashburn, VA (onsite)
• Clearance: Public Trust (successful completion of government background investigation)

Compensation

USD 105,000 - 115,000 per year

Certifications

• CompTIA Security+ or equivalent baseline cybersecurity certification required or strongly preferred.
• CISSP, CISM, CISA, CASP+, CySA+, or equivalent preferred.
• Tenable/Nessus, Splunk, vulnerability management, incident response, or continuous monitoring certifications are beneficial.
• Operational technology, IoT security, or industrial/field technology security training is a plus.

Benefits

• Competitive pay and benefits packages
• Health care
• Dental
• Vision
• Life insurance
• 401(k)
• Education assistance
• Paid time off including PTO, holidays, and any other paid leave required by law