Senior Cybersecurity Engineer

Carnegie Mellon University’s Senior Cybersecurity Engineer role supports the Cyber Risk and Resilience Directorate and the Cybersecurity Assurance Team (CA Team). The position focuses on consulting with mission partners and applying cybersecurity and operational resilience assessment and research to develop and transition practical solutions.

Role Overview

This position is based in Pittsburgh, PA (onsite). The Senior Cybersecurity Engineer will develop and transition solutions including frameworks, models, tools, policies, practices, technical guidance, and training, while representing the CA Team and the Software Engineering Institute (SEI) with customers, stakeholders, and research communities.

Responsibilities

• Lead engagements with customers and mission partners, representing the CA Team’s and SEI’s work.
• Contribute to customer projects aimed at advancing the state of the art in cybersecurity.
• Represent the SEI through regular presentations of the mission and related work to stakeholders.
• Engage with communities of interest through publication and presentation activities.
• Build and maintain relationships with relevant research and technology communities.
• Grow cybersecurity knowledge and stay current on emerging trends relevant to the team’s portfolio.
• Support cybersecurity assessment standardization, develop and apply security measurement approaches, and transition knowledge to the broader community.
• Collaborate with multidisciplinary teams to solve difficult customer challenges in diverse environments.
• Serve as a trusted advisor to defense and critical infrastructure customers.

Duties by Focus Area

• Customer Engagement (50%): Lead engagements with customers and mission partners, representing the CA Team’s and SEI’s work.
• Project Participation (30%): Contribute to customer projects and represent the SEI with regular stakeholder presentations.
• Community Engagement (15%): Present the mission and work through publication and presentations, and build relationships within research and technology communities.
• Professional Development (5%): Maintain and expand cybersecurity skills and knowledge on emerging topics relevant to the team’s portfolio.

Required Qualifications

• Education and experience: PhD in a relevant discipline with 5 years of applicable experience, or BS with 10 years, or MS with 8 years (as applicable to the role).
• Proven experience leading projects for a technical discipline.
• Ability to lead diverse teams analyzing and solving real-world problems by developing engineering guidance and applying or tailoring SEI and non-SEI technologies and resources.
• Experience demonstrating leadership by influence beyond the immediate team or span of control.
• Experience contributing to multiple simultaneous projects in a creative, high-energy environment.
• Willingness to experiment with new practices and develop processes, practices, and infrastructure that support successful projects.
• Experience mentoring, motivating, and empowering less-experienced team members to support performance and teamwork.
• Strong communication skills with the ability to interact collaboratively and diplomatically with customers and colleagues at all levels.
• Ability to understand the big picture, direction, and goals while also working into technical details.
• Capability to present complex ideas to audiences with varied subject-matter knowledge.
• Travel: Frequent (15-35%) travel to locations within the SEI and CMU community, customer sites, conferences, and offsite meetings.
• Subject to a background investigation and ability to obtain and maintain a Department of War security clearance.
• Applicants must be currently legally authorized to work for CMU in the United States.
• CMU will not sponsor or take over sponsorship of an employment visa for this opportunity.

Knowledge, Skills, and Abilities

• Experience managing information security risks and implementing controls at a mid to senior level.
• Experience managing technology controls and risks, including change management, infrastructure and capacity planning, availability, cloud services, and technology implementations.
• Experience managing continuity-related controls and risks such as business continuity and disaster recovery.
• Experience deploying information technology, including implementing security technology or designing, building, and maintaining networks.
• Consulting experience with private industry or government customers, including leading projects and engagements.
• Familiarity with cybersecurity and resilience standards, including NIST CSF, NIST SP 800 series, and ISO 27000 series.
• Knowledge of audit and assessment methodologies, tactics, techniques, and procedures.
• Knowledge of critical infrastructure protection concepts and standards.
• Understanding of maturity model concepts such as CMMI and Financial Sector Cyber Profile.
• Ability to work collaboratively with customers, colleagues, managers, and staff.

Technologies and Tools

• NIST CSF
• NIST SP 800 series
• ISO 27000 series
• SEI and non-SEI technologies and resources
• CMMI
• Financial Sector Cyber Profile
• A+ CE
• CCNA-Security
• CND
• Network+ CE
• SSCP
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)
• Project Management Professional (PMP)

Desired Experience

• Strong writing and editing ability, including experience supporting process action teams or instructional design working groups, such as course and information mapping and flowcharting.
• Certifications such as A+ CE, CCNA-Security, CND, Network+ CE, SSCP, CISSP, CISM, CISA, PMP, or equivalent experience.
• Understanding of the institute’s mission and stakeholders; priority military experience is not required, though some military experience can be beneficial.

Additional Role Information

• Locations: Arlington, VA; Pittsburgh, PA
• Job Function: Software/Applications Development/Engineering
• Position Type: Staff – Regular
• Full time
• Pay Basis: Salary
• Employment Type: Full time

Benefits

• Comprehensive medical, prescription, dental, and vision insurance
• Retirement savings program with employer contributions
• Tuition benefits
• Paid time off
• Observed holidays
• Life and accidental death and disability insurance
• Free Pittsburgh Regional Transit bus pass
• Access to the Family Concierge Team to help navigate childcare needs
• Fitness center access