McLean, VA

Cybersecurity Jobs in McLean, VA

27 jobs found

Include remote jobs

Today

Principal 5G/ nextG Cybersecurity Architect

The MITRE Corporation McLean, VA

McLean, VA

Today

Full time 5g Ai Security Cybersecurity Tools

Apply Now

Job Description

MITRE is seeking a Principal 5G/nextG Cybersecurity Architect to integrate AI capabilities into the design of secure next-generation communications architectures for Federal Government sponsors.

Responsibilities

Apply deep 5G/nextG expertise and modern AI techniques to develop and deliver secure, resilient cellular architectures, reference architectures, design patterns, solutions, and implementation strategies for government customers
Support development, implementation, and maturation of enterprise 5G/nextG strategies, roadmaps, standards, and governance
Lead or support planning, organization, and execution of 5G/nextG cybersecurity architecture, research, engineering, and implementation for USG projects and programs
Advance secure use of AI, machine learning, automation, and zero trust in next-generation communications systems
Use 3GPP 5G standards and emerging nextG standards to address complex technical challenges and translate standards into architecture decisions, security requirements, and implementation guidance
Develop architectural solutions and operational metrics for wireless broadband infrastructure across government installations
Support evolution of 5G reference architectures that promote security, resilience, and interoperability across hardware, software, network infrastructure, cloud and edge platforms, and end-user environments
Apply knowledge of network architectures, security technologies, zero trust, and cyber threats to help sponsors protect, detect, respond to, and recover from cyberattacks targeting 5G/nextG systems
Conduct and/or consume threat modeling and risk assessments; translate outputs into security requirements, controls, design decisions, test objectives, and acquisition criteria
Provide technical and strategic recommendations covering requirements, standards and policy, acquisition and sustainment, architecture implementation, and technology transitions
Collaborate with senior government officials, program leaders, engineers, operators, and industry stakeholders to deliver timely, cost-effective 5G/nextG guidance and solutions
Communicate complex technical findings, architecture tradeoffs, and risk decisions to senior executives, technical teams, and non-technical stakeholders

Requirements

Typically requires a minimum of 10 years of related experience with a bachelor’s degree; or 8 years with a master’s degree; or 5 years with a PhD; or an equivalent combination of related education and work experience
Advanced ability to architect secure enterprise-level solutions and apply zero trust principles to complex nextG system architecture
Demonstrated expertise in 3GPP, ENISA, and GSMA 5G/nextG standards, including meaningful engagement in emerging nextG standards and security considerations
Experience in 5G/nextG telecommunications, wireless network architecture, telecommunications systems engineering, or related communications technologies
Experience with wireless broadband infrastructure and large-scale or enterprise deployments
Experience applying cybersecurity principles to 5G/nextG networks, architectures, and threat environments
Expertise applying security controls and best practices across network security, identity and access management, application security, data protection, endpoint security, and cloud-hosted systems
Experience developing technical and security reference architectures, standards, design patterns, operational metrics, and reference models for enterprise or telecommunications systems
Knowledge of security logging, telemetry, analytics, orchestration, SIEM, and security data lake technologies and their use in enterprise security architectures and zero trust
Demonstrated ability to adapt AI/ML capabilities to dynamic cybersecurity and operational environments to support secure, resilient deployments and rapid decision support for network and security operators
Strong knowledge of common attack techniques, cyber threat landscapes, and threat-informed architecture and engineering practices
Ability to lead and collaborate across organizational and technical boundaries to solve complex technical problems
Strong verbal and written communication skills, including communicating with government senior executives and diverse technical audiences
Security clearance: Must have an active Top Secret U.S. Government issued Security Clearance
Citizenship: Must be a U.S. Citizen to be considered for clearance
Onsite requirement: Minimum of 3 days per week on-site

Preferred Qualifications

Active U.S. Government Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance
Advanced degree (Masters, PhD) in information technology, cybersecurity, engineering, telecommunications, artificial intelligence, or a related field
Relevant professional certifications
Understanding of security architecture frameworks and methodologies
Experience conducting or consuming threat modeling and translating results into design requirements and verification objectives
Experience with U.S. Government policy and guidance, including NIST RMF, NIST CSF, DoD 8500-series policy, CNSSI instructions, cybersecurity executive orders, NIST SP 800-series guidance, and NISPOM
Experience supporting C3 operations, policy, or governance forums
Prior experience supporting an Office of the Secretary of War (OSW)-level organization or comparable department-level headquarters
Experience providing technical recommendations for acquisition, sustainment, standards development, and technology transition activities
Experience implementing or managing SIEM tools, security data lakes, and enterprise security monitoring capabilities
Extensive experience providing senior-level technical leadership for 5G/nextG, advanced wireless, or next-generation communications programs

Technologies

Artificial intelligence (AI)
Machine learning
Automation
Zero trust
3rd Generation Partnership Project (3GPP) 5G standards
ENISA
GSMA 5G/nextG standards
SIEM
Security data lake
Security logging
Telemetry
Analytics
Orchestration
Security incident and event management (SIEM)
Cloud and edge platforms

Clearance Requirements

This requisition requires the candidate to have a minimum of Top Secret
Must have or obtain within one year from date of hire: Top Secret/SCI

Location and Schedule

McLean, VA (on-site)

Compensation

$172,800 - $216,000 - $259,200 annual (range includes midpoint)

View full job page →

2d ago

Cybersecurity Consultant

Guidehouse McLean, VA

McLean, VA

2d ago

$85k - $141k/yr Full time Cyber Risk Management Cybersecurity Tools Information Security

Apply Now

Job Description

Guidehouse supports cybersecurity professionals with a comprehensive total rewards package, competitive compensation, and flexible benefits designed to help you thrive in a diverse and supportive workplace. This onsite role in McLean, VA offers an annual salary range of USD 85,000 - 141,000 and the opportunity to deliver practical cyber risk management across client systems.

Responsibilities

Lead cyber risk management efforts across a portfolio of client applications.
Own the end-to-end POA&M lifecycle, including creation, tracking, validation, and closure of identified security weaknesses.
Prioritize remediation activities using risk severity, compliance requirements, and operational impact.
Conduct regular POA&M status reviews and coordinate with system owners and O&M teams to monitor milestone progress.
Perform BIAs to identify critical systems, functions, dependencies, and recovery time/objectives.
Collaborate with stakeholders to validate system criticality and align with continuity and contingency planning requirements.
Build and maintain strong working relationships across business, engineering, and security teams to validate fixes, resolve blockers, and support timely remediation.
Prepare reports and briefings for leadership and federal oversight stakeholders.
Provide cyber subject matter expertise during information security audits and assessments.
Maintain and update BIA documentation as system architecture and mission priorities evolve.

Requirements

Minimum two (2) years of overall work experience.
Experience in cybersecurity or IT risk management; candidates with cybersecurity risk management focus are preferred.
Hands-on experience with GRC platforms.
Deep understanding of NIST SP 800-53, FISMA requirements, and 800-37.
Strong communication and analytical thinking, with the ability to manage multiple concurrent priorities and deadlines.
Must be able to OBTAIN and MAINTAIN a Federal or DoD “PUBLIC TRUST”. Approved adjudication of the PUBLIC TRUST is required prior to onboarding with Guidehouse.
Candidates with an ACTIVE PUBLIC TRUST or SUITABILITY and an active HHS/NIH clearance are preferred.

Technologies

GRC platforms, NIST SP 800-53, FISMA, 800-37
Power BI, MITRE ATT&CK, EPSS, CVSS v3

Benefits

Medical, Rx, Dental & Vision Insurance
Personal and Family Sick Time & Company Paid Holidays
Position may be eligible for a discretionary variable incentive bonus
Parental Leave and Adoption Assistance
401(k) Retirement Plan
Basic Life & Supplemental Life
Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts
Short-Term & Long-Term Disability
Student Loan PayDown
Tuition Reimbursement, Personal Development & Learning Opportunities
Skills Development & Certifications
Employee Referral Program
Corporate Sponsored Events & Community Outreach
Emergency Back-Up Childcare Program
Mobility Stipend

Additional Information

Job Family: Cyber Consulting
Travel Required: Up to 25%
Clearance Required: Ability to Obtain Public Trust
Minimum Experience: 2 years

What Would Be Nice To Have

Experience developing automated data pipelines or integrating APIs into Power BI dashboards.
Knowledge of MITRE ATT&CK framework and vulnerability prioritization methodologies (e.g., EPSS, CVSS v3).
Prior experience supporting a federal agency or working in a Public Health environment.
Active CompTIA Security+ CE preferred; CISSP, CEH, or cloud-related certifications are a plus.

View full job page →

5d ago

Salesforce Security Engineer

Steampunk McLean, VA

McLean, VA

5d ago

Full time Application Security Identity and Access Management Incident Response

Apply Now

Job Description

Steampunk is hiring a Salesforce Security Engineer to serve as the primary security point of contact across the Salesforce environment.

Responsibilities

Design, implement, and audit Salesforce access controls including profiles, permission sets, roles, sharing rules, and field-level security, using least-privilege principles across all user populations.
Run periodic access reviews and recertifications to find and remediate overly permissive or outdated entitlements.
Configure and maintain Salesforce security controls in the Setup Menu, including session settings, login IP restrictions, password policies, MFA enforcement, Health Check, Shield Platform Encryption, and Event Monitoring.
Build and maintain Splunk queries and dashboards for monitoring Salesforce login events, permission changes, and anomalous access patterns; use log analysis to support incident investigation.
Assess and harden security for Salesforce Connected Apps, focusing on internet-facing settings such as CORS, CSP, Trusted URLs, OAuth/Connected App policies, and session security.
Support ISSO activities by assisting application security efforts and collecting required security artifacts for assessment and authorization.
Coordinate with system owners and compliance teams to ensure configurations align with federal security requirements (including NIST 800-53 and FedRAMP, as applicable).
Document security configurations, findings, and remediation actions for audit and ATO support.
Review and provision privileged user access.

Requirements

Ability to obtain and maintain a U.S. Government security clearance.
Bachelor’s degree.
8–10 years of experience in Salesforce administration or security engineering.
Strong knowledge of Salesforce access control models: profiles, permission sets, roles, and sharing rules, with demonstrated least-privilege implementation.
Extensive experience configuring Salesforce Setup Menu security settings, including session security, login policies, Health Check, Event Monitoring, and Shield.
Proficiency writing Splunk SPL for log analysis, monitoring, and alerting.
Working knowledge of web application security concepts, including CSP, CORS, trusted domains, and OAuth flows.

Technologies

Salesforce
Splunk
SPL
Shield Platform Encryption
Multi-factor authentication (MFA)
Health Check
Event Monitoring
Cross-Origin Resource Sharing (CORS)
Content Security Policy (CSP)
OAuth
Connected Apps

Preferred

Salesforce Administrator (ADM 201) or a Salesforce security-related certification.
Security certifications such as CISSP, CISM, or similar.
Familiarity with NIST 800-53 security controls.
Experience supporting federal government clients or ATO processes.

Location: McLean, VA (onsite)

View full job page →

5d ago

Cybersecurity Analyst

Booz Allen Hamilton McLean, VA

McLean, VA

5d ago

$62k - $141k/yr Full time Cloud Platforms Cybersecurity Tools Data Security

Apply Now

Job Description

Collaborate with DoD system stakeholders to identify cyber risks, support RMF/A&A deliverables, and guide remediation for cloud and hybrid environments.

Responsibilities

Partner with contractor teams and DoD government system owners, system administrators, and developers to identify cyber risks, analyze applicable policies, and define mitigation strategies.
Use input from subject matter experts (SMEs) and engineers to assess technical infrastructure and personnel dynamics across the threat landscape.
Support clients with actionable remediation plans.
Communicate risk management outcomes through presentations, detailed white papers, and milestone-based deliverables.
Translate security concepts for client decision-making to strengthen protection of critical DoD systems.
Serve as an information security SME while expanding capabilities across DevSecOps and cloud security.

Requirements

5+ years of experience working in a professional IT environment.
3+ years of experience in cybersecurity and Assessment and Authorization (A&A) supporting DoD environments.
Experience supporting federal government or DoD ATO packages, including performing A&A and RMF, and conducting risk assessments for federal government or DoD systems hosted in AWS, Azure, or hybrid cloud.
Experience performing technical evaluations and security control assessments in cloud-native and containerized environments.
Experience interfacing with engineering teams to align DevSecOps pipelines with cybersecurity policies.
Experience with NIST SP 800-53, CNSSI 1253, artifact generation, SSPs, POA&Ms, SAPs, risk assessments, and continuous monitoring.
Knowledge of compliance testing tools such as ACAS, SCAP, STIGs or SRGs, eMASS, or Xacta.
Top Secret clearance.
HS diploma or GED.
Ability to obtain DoD 8570 Level II Security+ Certification within 30 days of the start date.

Technologies

AWS, Azure
NIST SP 800-53
CNSSI 1253
ACAS, SCAP, STIGs, SRGs
eMASS, Xacta
DoD 8570 Level II Security+ Certification
SSPs, POA&Ms, SAPs
RMF, DevSecOps, A&A, continuous monitoring

Nice If You Have

Experience with DevSecOps, Path-to-Production, and CI/CD.
Experience administering Red Hat Enterprise Linux 8 or Windows Server 2019.
Experience with cloud tools and container orchestration security.
Knowledge of STIG and compliance scans.
Ability to advise stakeholders on cloud security strategies and container orchestration security such as Kubernetes, Rancher, and platform hardening.
Excellent verbal and written communication skills.
TS/SCI clearance.
Bachelor’s degree in IT or Cybersecurity.

Benefits

Health, life, disability, financial, and retirement benefits.
Paid leave.
Professional development.
Tuition assistance.
Work-life programs.
Dependent care.
Recognition awards program.
Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs.

Compensation

Salary range: $62,000 to $141,000 per year (annualized USD).
Final compensation may vary based on location, education, knowledge, skills, competencies, experience, and contract-specific affordability and organizational requirements.
Projected posting close: within 90 days from the Posting Date.

Work Model

Onsite: work primarily performed at a Booz Allen office or customer facility, collaborating directly with colleagues and customers as required.

Clearance

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Top Secret clearance is required.

Additional Notes

Identity verification may be required using advanced biometrics and artificial intelligence; candidates are expected to be on camera during interviews and assessments.
Candidate AI usage policy: using AI or other tools to assist with responses during interviews (in-person or virtual) is prohibited unless permission is explicitly provided.
Non-discrimination: all qualified applicants receive consideration without regard to protected characteristics under applicable law.

Location: McLean, VA (onsite) • Experience: 3+ years (minimum) • Education: HS diploma or GED • Salary: USD 62,000 - 141,000 per yearly.

View full job page →

6d ago

Senior Security Analyst / FSO

Iridium Satellite, LLC McLean, VA

McLean, VA

6d ago

$108k - $140k/yr Full time Senior Contractor Security Officer Dcsa

Apply Now

Job Description

The Senior Security Analyst / FSO role supports Iridium’s Compliance & Security team by fulfilling Facility Security Officer (FSO) and related contractor security responsibilities. This position ensures physical, personnel, and contract security compliance across multiple facilities and programs while coordinating clearance and security review activities.

Key Responsibilities

Act as Facility Security Officer (FSO), Contractor Security Officer (CSO), or Contractor Program Security Officer (CPSO), managing physical security across multiple facilities in alignment with 32 CFR Part 117 NIPSOM Rule and ICD 705 requirements.
Coordinate and manage personnel security clearance requirements in accordance with SEAD 3 and applicable regulations.
Lead and support government security reviews, assessments, and audits; conduct and document required self-inspections/assessments; and drive corrective actions.
Serve as a point of contact and maintain coordination with DCSA and other relevant government entities.
Investigate and document security violations and related incidents, ensuring timely reporting per government requirements and corporate policies.
Support required security awareness education for both uncleared and cleared employees.
Review contracts and DD254s for security requirements, partnering with the Contracts team and program management to support compliance.
Serve as lead security POC/Subject Matter Expert for assigned programs, providing guidance and training to relevant groups.
Perform COMSEC Manager duties and maintain compliance with applicable policies and procedures.

Required Qualifications

Bachelor’s degree in a related field.
5+ years of experience managing physical security in accordance with 32 CFR Part 117 NISPOM Rule and ICD 705, including experience serving as an FSO, Assistant FSO, Contractor Site Security Manager (CSSR), CPSO, and/or CSO.
Completion of the Facility Security Officer (FSO) courses and certification through the Center for Development of Security Excellence (CDSE).
Knowledge of 32 CFR Part 117 NISPOM Rule, SEAD 3, Adjudicative Guidelines, and applicable government requirements.
Experience using Defense Information System for Security (DISS), eAPP (electronic SF86), NBIS (National Background Investigative Services), Secure Web Fingerprint Transmission (SWFT), NISS (National Industrial Security System), and other security forms and security management databases.
Experience managing COMSEC and complying with all government requirements.
Excellent communication skills, with the ability to convey products, deliverables, analyses, and issues to teams outside of your immediate area.
Confidence building relationships with leadership and colleagues outside of your team.
Strong analytical mindset for critical thinking and decision-making.
Proactive approach to feedback and sharing knowledge with others.
Ability to prioritize tasks and meet deadlines, including coordinating tasks for others as needed.
Active Top Secret/SCI clearance.
U.S. citizenship.
Ability to work a hybrid schedule including at least 80% of time in office (4 days per week).
Ability to travel up to 10%.

Strong Plus (If You Have It)

Full Scope Polygraph

Technologies and Standards

32 CFR Part 117 NIPSOM Rule
ICD 705
SEAD 3
Defense Information System for Security (DISS)
eAPP (electronic SF86)
NBIS (National Background Investigative Services)
Secure Web Fingerprint Transmission (SWFT)
National Industrial Security System (NISS)
DD254s

Compensation and Location

Location: McLean, VA (hybrid)
Base pay range: USD 108,000 - 140,000 per year
Actual compensation will be determined based on multiple factors; the posting range is an estimate.

Benefits

Medical insurance
Dental insurance
Vision insurance
401(k) retirement plan options
Paid time off and paid holidays
Paid parental leave
Company stock and annual bonus eligibility
Other discounts and perks

Work Environment

This role primarily operates in an office setting and is largely sedentary, with most tasks performed on a computer. Basic office equipment is used as needed (phone, video, computer, keyboard, mouse, printer). Under Iridium’s Hybrid Work Policy, employees are expected to work at least four days per week (approximately 80%) in an Iridium office to support collaboration, relationship-building, and professional growth.

Additional Notes

This job description provides a general overview of duties and qualifications and does not list every task that may be required. Additional responsibilities may be assigned as needed.

View full job page →

1mo ago

Mid-Level OT/IT Network & Cybersecurity Engineer

Leidos McLean, VA

McLean, VA

1mo ago Closed

$87k - $157k/yr Full time Certificate Management Engineer Industrial Cybersecurity

This position is no longer accepting applications (closed Sep 20, 2026).

Job Description

Leidos’ Saxton Lab Team at FHWA STOL is seeking a mid-level OT/IT Network & Cybersecurity Engineer to own operational technology and IT network/testbed infrastructure, along with the lab’s OT/ICS cybersecurity posture. This role supports connected-vehicle testing and demonstrations in research environments where operational safety and reproducibility are essential.

Role Location and Employment Details

Location: McLean, VA (onsite)
Experience: 4+ years
Education: Bachelor’s degree (or technical associate’s degree) in a related technical field

Compensation

Annual salary range: USD 87,100 - 157,450
Pay range noted: $110,000 – $130,000 per year (commensurate with experience)

Key Responsibilities

Design, build, and operate OT/IT networks for testbeds, including VLAN segmentation, firewall/ACL, and routing; support wireless distribution and fiber/copper cabling; and manage backhaul to field-deployed roadside units (RSUs), edge nodes, and remote sites (C-V2X PC5/Uu, 5G NR, and Wi-Fi).
Own day-to-day operations for the testbed and Smart Garage, including commissioning and maintaining RSUs, onboard units (OBUs), signal controllers, edge platforms, and network hardware; resolve connectivity, latency, protocol, and hardware issues across lab and field.
Maintain accurate network documentation, ensure precise time synchronization using PTP/IEEE 1588, NTP, and GPS, and support reliable edge-to-analytics data movement to enable reproducible experiment results.
Establish and maintain the lab-wide OT security posture using relevant frameworks such as NIST SP 800-82 and NIST SP 800-53, applying judgment for research needs rather than blanket compliance; implement defense-in-depth segmentation using the Purdue Model or IEC 62443 (including IT/OT DMZ and bastion hosts with filtering).
Stand up and operate V2X security capabilities including PKI and SCMS credentialing, and perform OT-appropriate vulnerability assessment and intrusion or anomaly monitoring, coordinating remediation with program security.
Build and maintain security-enabling environments for transportation cybersecurity research, and keep incident-response procedures and cybersecurity reviews current.
Translate concurrent R&D requirements into testbed configurations and instrumentation, and keep environments in known, repeatable states for valid outcomes.
Support test scenarios, in-vehicle and roadside instrumentation, and the technical preparation and execution of lab tours, live demonstrations, and field testing.
Support daily operations with a safety-first approach, ensuring IT, OT, and cybersecurity activities follow safety procedures during routine operations, testing, and special events, including change-control for reconfigurations, deployments, and firmware updates.
Treat OT cybersecurity as safety-critical, applying domain-specific safety practices (RF, electrical/cabling, and on-road or closed-course protocols) and coordinating with facilities on power, environmental controls, and cable management.

Required Qualifications

Ability to work full-time on-site in McLean, VA.
Ability to obtain and maintain a Public Trust clearance (requires three years’ continuous U.S. residency) and a valid driver’s license.
Bachelor’s degree in Electrical/Computer Engineering, Network Engineering, Computer Science, IT, or a related technical field with 4–8 years of hands-on experience in OT/IT networking, R&D, industrial, or field-deployed systems, or a technical associate’s degree with 7+ years (equivalent demonstrated experience considered in lieu of a degree).
4+ years designing, deploying, and administering OT or IT/OT converged networks, including managed switching/routing, VLAN segmentation, VPN, and firewall rules, with exposure to OT/ICS or research-testbed environments with field-deployed devices.
Strong infrastructure fundamentals in fiber/copper cabling, network/RF diagrams, and time synchronization (NTP, PTP/IEEE 1588, GPS), plus comfort using Linux for device administration and scripting.
Working knowledge of C-V2X (PC5/Uu) or the ability to acquire it quickly.
Holistic OT/ICS security knowledge, including applying appropriate controls using NIST SP 800-82/800-53, Purdue Model, or IEC 62443, with judgment for a transportation research environment; familiarity with the OT threat landscape and PKI/SCMS for V2X credentialing.
Awareness of cybersecurity’s relationship to functional safety in automated systems.
Strong written and verbal communication for documentation and stakeholder briefings, with the ability to manage competing priorities in a fast-paced environment.
Ability to perform hands-on work in lab, garage, and field settings (lifting up to 50 lbs) and occasional off-hours support for testing and events with reasonable scheduling flexibility.

Technologies and Tools (Relevant)

Networking and infrastructure: VLAN segmentation, firewall/ACL, routing, wireless distribution, fiber/copper cabling, VPN
Connected-vehicle and communications: C-V2X PC5/Uu, 5G NR, Wi-Fi, SAE J2735, SAE J3161
Time synchronization: PTP/IEEE 1588, NTP, GPS
OT security frameworks and models: NIST SP 800-82, NIST SP 800-53, IT/OT DMZ, bastion hosts, Purdue Model, IEC 62443
V2X security: PKI, SCMS credentialing
Monitoring and security practices: vulnerability assessment, intrusion/anomaly monitoring
Administration: Linux
OT monitoring tools (listed): Claroty, Dragos, Nozomi, Savari
RSU platform experience (listed): Cohda Wireless, Commsignia, Kapsch
Training and certifications (listed): SANS ICS515, CCNA, CCNP, Security+, CySA+, GICSP

Benefits

Health, dental, and vision insurance
Retirement plan
Paid time off

Preferred Qualifications

Certifications such as CCNA/CCNP, Security+, CySA+, or GICSP; OT/ICS security training (e.g., SANS ICS515).
Hands-on RSU platform experience (Savari, Cohda Wireless, Commsignia, Kapsch) with SCMS enrollment.
C-V2X (PC5) and 5G NR.
Experience with SAE J2735 and SAE J3161 (C-V2X).
Experience using OT monitoring tools (Claroty, Dragos, Nozomi).
Experience supporting federally funded R&D or government contracting.

Posting Date

Original posting: July 8, 2026

View full job page →

1mo ago

Cybersecurity SME - Lead (Cyber Tools)

Credence McLean, VA

McLean, VA

1mo ago Closed

$135k - $156k/yr Full time Cybersecurity Tools Data Security Engineering

This position is no longer accepting applications (closed Sep 19, 2026).

Job Description

Credence is seeking a Cybersecurity SME – Lead (Cyber Tools) to serve as a hands-on technical authority for cybersecurity engineering, security tooling, and emerging technologies. Based in McLean, VA, this role is onsite and supports efforts to strengthen the organization’s security posture through tool evaluation, threat analysis, and engineering leadership.

As the lead, you will guide security tool implementation and automation opportunities, produce technical analysis and recommendations, and mentor other engineering staff. The position also involves collaboration on Operational Technology (OT) cybersecurity initiatives in coordination with the OT Security Engineer.

Key Responsibilities

Act as the technical lead for cybersecurity tools, engineering initiatives, and emerging technologies.
Evaluate, recommend, implement, and integrate cybersecurity tools to enhance operational effectiveness.
Research emerging cybersecurity threats, attack techniques, vulnerabilities, and defensive technologies.
Perform technical threat assessments, vulnerability analyses, and cybersecurity risk assessments.
Create technical white papers, engineering analyses, risk assessments, and recommendations that support cybersecurity decision-making.
Develop engineering recommendations to improve the organization’s overall security posture.
Mentor and train Cybersecurity Engineers and other technical staff on cybersecurity tools, engineering methodologies, and emerging technologies.
Support Operational Technology (OT) cybersecurity initiatives and collaborate with the Operational Technology Security Engineer on FSEI and other OT-related efforts.
Establish engineering standards and technical best practices for cybersecurity tool implementation and integration.
Drive continuous improvement of the team’s technical cybersecurity maturity through research, innovation, and knowledge sharing.
Identify opportunities to automate cybersecurity processes and improve operational efficiency through engineering solutions.
Develop and maintain enterprise cybersecurity reporting solutions, including Power BI dashboards, Splunk dashboards, Microsoft Sentinel workbooks, cybersecurity metrics, and executive reporting capabilities.

Required Qualifications

DOD Secret Clearance
Bachelor’s Degree in Computer Science, IT, or a related field
DOD 8570.01 Information Assurance Technical (IAT) Level III Certification

Tools & Technologies

Power BI
Splunk
Microsoft Sentinel

Compensation

$135,000 - $156,000 per year. Actual compensation will be determined based on the selected candidate’s experience, education, certifications, skills, and overall qualifications.