Senior Cybersecurity Engineer

The Senior Cybersecurity Engineer will support the Command, Control, Communications (C3C) / Kessel Run division by assisting the Air Operation Center (AOC) cybersecurity team with the implementation, maintenance, and operation of the Assured Compliance Assessment Solution (ACAS) suite. This is an entry-level hands-on role and is contingent upon contract award.

Location

Remote (remote)

Compensation

USD 175,000 - 190,000 per year

Responsibilities

• Assist with the installation, configuration, and maintenance of ACAS components, including Nessus scanners, SecurityCenter/Tenable.sc, and Nessus Network Monitor (NNM)/Tenable.asm.
• Assist with scheduling and executing vulnerability scans using Nessus scanners.
• Analyze scan results to identify vulnerabilities and misconfigurations.
• Support DISA STIG-based configuration hardening across multi-classification networks.
• Assist with compliance assessments against DoW standards and internal security policies.
• Generate reports covering vulnerability status, compliance posture, and remediation progress.
• Collaborate with system administrators to facilitate vulnerability remediation.
• Assist with system administration tasks for ACAS servers and databases.
• Manage cybersecurity incident reporting and support root-cause analysis.
• Develop corrective action plans and maintain POA&Ms.
• Stay up to date on the latest vulnerability trends and security threats.

Required Qualifications

• Must be a US citizen.
• Must have and be able to maintain an Active Top Secret/SCI eligible clearance.
• Bachelor’s degree in a professional engineering discipline from an ABET-accredited educational program, or at least 7 years of experience in the respective technical/professional discipline, with 3 years in the DoD.

Preferred Qualifications

• Understanding of cybersecurity in DoD cloud infrastructure.
• Knowledge of Agile methodologies, including CI/CD, DevSecOps, and DevOps.
• Experience with systems analysis and eMASS.
• Strong ability to communicate technical topics effectively in written and verbal forms.

Technical Skills

• STIG compliance
• Risk Management Framework (RMF) implementation and documentation
• DoD cybersecurity policies and compliance
• System Authorization and Accreditation (A&A) processes
• DoD cloud infrastructure security
• Agile development methods including CI/CD, DevSecOps, and DevOps
• Security risk, vulnerability, and contingency planning
• PKI management and access control
• Classified material handling and accountability

Interpersonal Skills

• Strong verbal and written communication skills for technical and non-technical audiences
• Ability to collaborate with government, contractor, and industry stakeholders
• Effective problem-solving and analytical thinking
• Ability to work independently and manage multiple priorities in a fast-paced environment
• Adaptability to evolving program requirements and security challenges

Technologies

• Assured Compliance Assessment Solution (ACAS)
• Nessus scanners
• SecurityCenter/Tenable.sc
• Nessus Network Monitor (NNM)/Tenable.asm
• Nessus
• DISA STIG-based configuration hardening
• eMASS
• Agile methodologies
• CI/CD
• DevSecOps
• DevOps
• Risk Management Framework (RMF)
• System Authorization and Accreditation (A&A)
• PKI management
• DoD cloud infrastructure

Benefits

• Medical, dental, vision, life insurance
• Tricare supplement
• Short-term disability
• Long-term disability
• 401(k) match
• Flexible spending accounts
• Health savings accounts
• Employee assistance program
• Learning and development benefit
• Paid time off
• Holidays

Additional Information

• Location: hybrid flexibility at Hanscom AFB or full remote capability for candidates located near secure operational facilities
• #LI-KM1