Senior Cybersecurity Engineer

This Senior Cybersecurity Engineer role supports the Air Force Life Cycle Management Center Ground Base Air Defense Sensor division (AFLCMC/ESG) at Hanscom AFB in Bedford, MA. The position focuses on vulnerability management, DISA STIG-based hardening, compliance support, and cybersecurity incident reporting, including root-cause analysis and remediation tracking.

Location

Hanscom AFB, MA (onsite)

Salary

USD 175,000 - 185,000 per year

Key Responsibilities

• Assist with installation, configuration, and maintenance of ACAS components, including Nessus scanners, SecurityCenter/Tenable.sc, and Nessus Network Monitor (NNM)/Tenable.asm.
• Support scheduling and execution of vulnerability scans using Nessus scanners.
• Review scan outputs to identify vulnerabilities and misconfigurations.
• Direct DISA STIG-based configuration hardening across multi-classification networks.
• Assist with compliance assessments against DoW standards and internal security policies.
• Produce reports covering vulnerability status, compliance posture, and remediation progress.
• Coordinate with system administrators to support vulnerability remediation efforts.
• Perform system administration tasks for ACAS servers and associated databases.
• Manage cybersecurity incident reporting and conduct root-cause analysis.
• Develop corrective action plans and maintain POA&Ms.
• Monitor evolving vulnerability trends and security threats to support ongoing risk reduction.

Required Qualifications

• Must be a US citizen.
• Must have and maintain an Active Secret clearance.
• CISSP certification required.
• Bachelor’s degree in a professional engineering discipline from an ABET-accredited program, plus at least 10-15 years of experience in the relevant technical or professional discipline, with 10 years in the DoD.
• Understanding of cybersecurity in DoD cloud infrastructure.
• Knowledge of Agile methodologies, including CI/CD, DevSecOps, and DevOps.
• Experience with systems analysis and eMASS.
• Strong ability to communicate technical information effectively in written and verbal forms.

Relevant Technologies

• ACAS
• Nessus
• SecurityCenter/Tenable.sc
• Nessus Network Monitor (NNM)/Tenable.asm
• DISA STIG
• Risk Management Framework (RMF)
• eMASS
• Agile methodologies, CI/CD, DevSecOps, DevOps
• PKI

Benefits

• Medical, dental, and vision
• Life insurance
• Tricare supplement
• Short-term disability
• Long-term disability
• 401(k) match
• Flexible spending accounts
• Health savings accounts
• Employee assistance program
• Learning and development benefit
• Paid time off
• Holidays