Systems Security Engineering

Systems Security Engineering Cybersecurity Jobs

23 jobs found

27d ago

Information System Security Engineer (ISSE) II

General Dynamics Information Technology Colorado Springs, CO

Colorado Springs, CO

27d ago

$166k - $225k/yr Full time Cyber Security Cybersecurity Tools Data Security

Apply Now

Job Description

Focus: Information system security engineering across the lifecycle, integrating security requirements into organizational and upgraded information systems while supporting Collateral, SCI, and Special Access Program (SAP) activities.

Responsibilities

Oversee development, implementation, and evaluation of information system security program policy, with special emphasis on integration of existing SAP network infrastructures
Conduct network security analysis using the Risk Management Framework (RMF), emphasizing the JSIG authorization process
Provide expert support, research, and analysis for exceptionally complex information security problems and associated processes
Deliver expert consultation and technical services across all aspects of information security
Serve as a technical expert to the Cybersecurity Assessment Program, providing technical direction, interpretation, and alternatives for complex issues
Build IA into systems deployed to operational environments
Support architects and system developers in identifying and implementing appropriate security functionality to ensure consistent application of DoD and other agency security policy and enterprise solutions
Enforce trusted relationships among external systems and architectures
Assess and mitigate system security threats and risks throughout the program lifecycle
Contribute to security planning, assessment, risk analysis, risk management, certification, and awareness activities for system and networking operations
Independently apply advanced technical principles, theories, and concepts with strong written and oral communication
Contribute to development of new principles, concepts, and methodologies
Work on unusually complex technical problems and provide innovative solutions
Recommend cybersecurity software tools; help develop tool requirements and selection criteria, including development of product-specific STIGs from applicable DISA SRGs
Review ISSE-related designs and provide security compliance recommendations
Lead technical teams in implementation of predetermined long-range goals and objectives
Support customer and SAP community IA working groups and participate in SSE IPT reviews
Provide IA risk management recommendations to the customer
Provide ISSE support for Mission and Training systems design and development
Assist with development and maintenance of the Program Protection Plan
Support site activation activities and design reviews
Represent the customer in ISSE-related working groups, advisory groups, and advisory council meetings
Chair or co-chair customer and SAP community IA working groups and participate in ISSE IPT reviews
Provide ISSE support as part of a security incident response team as needed
Maintain operational O&M checklists (daily, weekly, monthly, yearly) and develop associated TTPs and SOPs
Integrate COTS and GOTS products to collect, display, and remediate automated system security and operations/performance metrics
Integrate and tailor monitoring capabilities with enterprise SIEM, including creating complex event alarms/rules and summary reports
Write and execute cybersecurity test procedures for validation of control compliance
Monitor and analyze cybersecurity tool output for reportable security incidents and residual risk
Analyze technical risk of emerging cybersecurity tools and processes
Develop improvements to the accuracy and efficiency of security assessments
Integrate JSIG/RMF Continuous Monitoring tools and processes
Lead teams of System Security Engineers and Cybersecurity Analysts to protect national and international security interests during support equipment design and testing
Maintain relationship with System Engineer (SE) teams and enforce trusted relations among external systems and architectures
Assess and mitigate security threats/risks across the program lifecycle and contribute to certification and awareness activities for system and networking operations

Requirements

12+ years related experience (REQ notes: 10+ years may vary based on training/certifications/degree)
2+ years SAP experience required
Prior performance in roles such as ISSO, ISSM, SCA, or SAP IT Technical Director
Bachelor’s degree in related discipline OR Associate’s degree in a related area + 2 years experience OR equivalent experience (4 years)
IAAΕ Level I or Level II required within 6 months of date of hire (CASP+ CE, CISSP (or Associate), CSSLP)
Top Secret/SCI clearance required
Must be able to attain TS/SCI with CI Polygraph
U.S. Citizenship required
Certifications listed as applicable options: CSSLP (ISC)2; CASP CE+ (CompTIA); CASP+CE (CompTIA)

Technologies

Information Security, Information Security Management, Information System Security
Risk Management Framework (RMF), Joint Special Access Program Implementation Guide (JSIG)
Cybersecurity Assessment Program, Continuous Monitoring
DISA SRGs, STIGs, COTS, GOTS
SIEM, Logrhythm
Operations and Maintenance (O&M) checklists, Tactics, Techniques and Processes (TTPs), Standard Operating Processes (SOPs)
Microsoft Windows Server, Active Directory, Group Policy management
Red Hat Enterprise Linux, MS Hyper-V, VMWare, ESx, Xen hypervisors
Enterprise networking, firewalls, intrusion detection, intrusion prevention systems
Forensic analysis, vulnerability assessment
Configuration, Scripting, BMC Footprints, WSUS, Lumension, Bitlocker
SQL Server 2012, TomCat, IIS, Windows Server 2012r2/2016, Windows 10, Red Hat 6.5
ACAS/Nessus/SCAP
Mandatory/role-based access control concepts (SE Linux extensions to RHEL, PitBull, AppArmor, Sentris)
Video teleconferencing/VOIP
Oracle/MS SQL database security
Apache/IIS Web server security
Patch/Configuration management, DevOps, tier 3 support

Location: Colorado Springs, CO (onsite)

Travel: 10% to 25%

Clearance Level: Top Secret/SCI

Requisition #: RQ230157

Category: Cyber and IT Risk Management

Salary: USD 166,005 - 224,595 per year (may vary based on experience, geographic location, and contractual requirements)

View full job page →

28d ago

Senior Systems Engineer - Cybersecurity Software

General Dynamics Mission Systems, Inc Manassas, VA

Manassas, VA

28d ago

$165k - $183k/yr Full time Senior Engineer Information Security

Apply Now

Job Description

Join General Dynamics Mission Systems, Inc in Manassas, VA to help deliver cybersecurity software for mission-critical U.S. Navy computer systems. In this primarily on-site role, you will serve as a senior systems engineer and cybersecurity subject matter expert, working alongside customers and engineering teams to translate mission needs into detailed, verifiable requirements that reduce cyber risk. The position offers a strong benefits package, flexible scheduling with a 9/80 option (including every other Friday off), and support for your health and well-being.

Location: Manassas, VA (onsite)
Estimated Salary: USD 164,892 - 182,928 per year (actual pay may vary)

What you’ll do

Act as the cybersecurity subject matter expert for assigned software capabilities, providing technical guidance to customers and engineering teams.
Partner with customers to understand mission requirements, operational environments, cybersecurity threats, and product priorities.
Develop clear, detailed, and verifiable low-level software requirements that turn customer needs into implementable capabilities.
Review system architectures, interfaces, data flows, attack vectors, and vulnerabilities to inform requirements and design decisions.
Recommend software capabilities and technical mitigations to prevent, detect, or reduce cybersecurity risks.
Collaborate with software engineers to evaluate technical approaches and design tradeoffs.
Work with test engineers to define verification criteria, resolve requirement questions, and confirm delivered capabilities meet customer needs.
Maintain requirements traceability throughout development, integration, testing, and delivery.
Monitor relevant cybersecurity news, emerging exploits, adversary techniques, and defensive technologies, assessing product implications.
Develop and review systems engineering, cybersecurity, and accreditation documentation as needed.
Communicate technical findings, risks, recommendations, and progress to customers, program stakeholders, and engineering teams.
Mentor less-experienced engineers in your area of expertise.

Minimum qualifications

Bachelor’s degree in Systems Engineering, or a related Science, Engineering or Mathematics field, plus at least 8 years of relevant experience; or a Master’s degree plus at least 6 years of relevant experience.

Cybersecurity and engineering experience that helps

Strong systems engineering experience with software, including creating and managing detailed, verifiable software requirements.
Customer-facing experience translating operational needs into technical requirements and deliverable capabilities.
Cybersecurity expertise focused on how attacks work, including attack vectors, vulnerabilities, adversary techniques, and practical mitigations.
Knowledge of cybersecurity capabilities such as access control, auditing, network security, intrusion prevention, encryption, or vulnerability detection.
Experience with ICD 503, NIST SP 800-53, the DoD JSIG, the DoD 8500 series, or comparable DoD cybersecurity guidance.
Experience with threat analysis, risk assessment, requirements traceability, or accreditation support.
Strong technical writing and communication skills for technical and nontechnical audiences.
Experience working in an Agile environment and proficiency with Microsoft Office products.

Clearance and citizenship

Department of Defense Secret security clearance is obtainable within a reasonable amount of time after hire.
Selected applicants will be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information.
U.S. citizenship is required due to the nature of work performed within company facilities.

Benefits and flexibility

401(k) matching
Flexible time off
Paid parental leave
Healthcare benefits
Health and wellness programs
Employee resource groups
Social groups
Flexible schedules, including the option for every other Friday off through a 9/80 schedule
Competitive benefits

Workplace options: Primarily on-site with opportunities for hybrid and flexible work options available.

Hiring note: This job posting will remain open until the position is filled.

View full job page →

1mo ago

Senior Systems and Security Analyst

J. Sargeant Reynolds Community College Henrico County, VA

Henrico County, VA

1mo ago Closed

$65k - $75k/yr Full time Senior Data Security Endpoint Security

This position is no longer accepting applications (closed Nov 5, 2026).

Job Description

Henrico County, VA (onsite) | USD 65,000 - 75,000 per year

The Senior Systems and Security Analyst role at J. Sargeant Reynolds Community College supports enterprise technology and security in a senior capacity. You will help keep mission-critical systems stable and secure by administering server and identity environments, conducting vulnerability management and remediation, supporting controlled infrastructure changes, and contributing to continuity planning and incident response.

Key responsibilities

Administer, patch, secure, monitor, and troubleshoot Windows and Linux servers.
Implement operating system hardening for servers and user endpoints.
Administer virtualization, storage, and backup and recovery systems.
Perform system maintenance to support availability, performance, capacity, and recoverability.
Administer Active Directory and Microsoft Entra user, group, and device accounts.
Support Microsoft Entra single sign-on implementations.
Administer endpoint management platforms and perform software packaging and deployments.
Support Exchange Online, Teams, SharePoint Online, OneDrive, and advanced Teams Calling functions.
Conduct vulnerability assessments, analyze findings, coordinate remediation, validate corrective actions, and maintain supporting records.
Support quarterly and annual audits including evidence collection, technical responses, access reviews, and remediation tracking.
Support LAN/WAN networked environments.
Coordinate system updates, upgrades, integrations, and infrastructure changes.
Coordinate technical activities with vendors and network engineering staff.
Participate in change management review, testing, approval, implementation, validation, and rollback planning.
Develop and maintain disaster recovery and incident response documentation.
Participate in recovery testing, BIA, incident response, system restoration, and after-action activities.
Document standard operating procedures, system configurations, incidents, findings, remediation steps, and support guidance.
This position may serve as a technical lead or senior technical resource for major implementations, migrations, upgrades, integrations, and infrastructure replacement projects.
This position may be assigned to respond to cybersecurity incidents, critical outages, service disruptions, system failures, data recovery events, or other operational emergencies.
Other duties as assigned.

What you bring

Knowledge of security best practices.
Knowledge of Windows and Linux server platforms, including virtualized environments.
Knowledge of endpoint management systems.
Knowledge of MS 365 applications.
Knowledge of Entra/Active Directory and account management.
Knowledge of networking technologies.
Knowledge of IT auditing and continuity planning.

Technologies you will work with

Windows, Linux
Active Directory
Microsoft Entra, Microsoft Entra single sign-on
Exchange Online
Teams, SharePoint Online, OneDrive, advanced Teams Calling
LAN/WAN
BIA
Microsoft 365

Additional considerations

Bachelor’s degree in information systems or related field, or similar experience (master’s preferred)
Previous experience in a security or systems administration role
Experience in an educational environment preferred
Security related certifications preferred
IT related certifications (Microsoft, A+, Security+, Cisco, etc.) preferred

View full job page →

1mo ago

Cybersecurity Lead / Information Systems Security Manager (ISSM)

Bravura Information Technology Systems Redstone Arsenal, AL

Redstone Arsenal, AL

1mo ago Closed

Full time Manager Cybersecurity Leadership Cybersecurity Program

This position is no longer accepting applications (closed Nov 1, 2026).

Job Description

Bravura Information Technology Systems is seeking a Cybersecurity Lead / Information Systems Security Manager (ISSM) to support program and system cybersecurity activities at Redstone Arsenal, AL. In this onsite role, you will lead RMF Assess and Authorize support and help execute authorization activities, vulnerability management, and CS/IS systems engineering compliance aligned to NIST 800-series controls and DoD/Army cybersecurity requirements.

Role overview

You will be responsible for the cybersecurity of a program, organization, system, or enclave. The position includes acting as a primary point of contact for CS and IS Systems Engineering (ISSE) issues, guiding CS execution across system security architecture, and coordinating efforts tied to ATO/ATC/IATT processes and incident coordination.

Responsibilities

Lead cybersecurity/ISSM execution, including RMF Assess and Authorize support and security documentation such as SSP, PPSM, and POA&M.
Own vulnerability management, including security artifact support for authorization, and coordinate incident-related activities in alignment with program expectations.
Maintain network security and authorization for mission network operations by controlling connections, user accounts, and access privileges, and by collaborating with the security team to identify, resolve, and report vulnerabilities and incidents.
Support systems engineering and program execution by maintaining adequate security expertise for input to systems engineering, software design and integration, testing, and training, while complying with applicable regulations, policies, and guidance.
Ensure CS design, engineering, and implementation comply with required NIST 800 Series CS controls, including identification and implementation of CS and CS-enabled IT products IAW NIST 800 Series.
Design, engineer, and implement technical and non-technical security configuration throughout the system security architecture, including development of Threat Assessment, Vulnerability Assessment, and Risks Assessment documentation.
Ensure exceptions involving CS policy/requirement limitations, configuration changes, alternative engineering solutions, or discrepancies are approved by the Government Change Control Board (CCB) prior to implementation.
Submit Contractor’s Risk Management to support use of third-party, public domain, and Free and Open Source Software (FOSS) products, including SBOM where feasible, for Government CCB approval.
Obtain Government CS ISSM email approval at Engineering or CS TIM or CCB prior to use of Mobile Code IAW NIST SP 800-53.
Implement a software assurance program for software applications created on behalf of the Customer, applying best practices such as static code analysis, DISA APP DEV STIG implementation, OWASP Top 10 implementation, and NETCOM Software Assurance TTP while supporting RMF application development requirements.
Produce and maintain a Hardware Baseline Inventory IAW authoritative cybersecurity repository requirements using NIST SP 800-53 and NIST SP 800-160.
Develop and document a Vulnerability Management Plan (VMP) including control summary, IAVM process overview, IAVA implementation, and vulnerability monitoring.
Review and evaluate security patches and update system software for operating system and resident applications.
Prepare an IAVM Test Report specifying information assurance and security test and scans, patch assessment details, and IAVA distribution, including CS scans using DISA approved CS scanning tools.
Produce, maintain, and deliver cybersecurity artifacts/documentation to support RMF A&A, including SSP, PPSM, and POA&M.
Identify and prioritize remediation for vulnerabilities and weaknesses discovered through CS testing, focusing on High and Moderate risks (formerly CAT I and CAT II) as the highest priority and proposing remediation for Low risk (formerly CAT III) items.

Requirements

Must fulfill at least one: Masters or Doctorate in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering, or Masters in Strategic Information & Cyberspace Studies (NDU CIC); OR completion of military training including 4C-FA26A (Network Systems Engineer), A-531-0009 (ISSM), ISSM (Advanced) Credential / Playlist, M09CHN1 (Communications Chief Course), M09D3H1 (ISSM), or M09DRX1 (MAGTF Communications Planner); OR Active certification as 8+ years.
8+ years of experience.
Secret minimum; TS/SCI and SAP access as required by assigned systems/workspaces; CAC/NACI required.
DCWF 8140.

Key technologies

NIST 800 Series, NIST SP 800-53, NIST SP 800-160, RMF
SSP, PPSM, POA&M, ATO, ATC, IATT
DISA APP DEV STIG, OWASP Top 10, NETCOM Software Assurance TTP
SBOM, FOSS, Mobile Code
IAVM, IAVA, DISA approved CS scanning tools
Hardware Baseline Inventory, Vulnerability Management Plan (VMP), IAVM Test Report
static code analysis, CCB

Job category: Cybersecurity Engineer ISSM
Job type: Full Time
Location: Redstone Arsenal, AL (onsite)
Clearance level: Minimum Secret (active) Up to TS/SCI
Education/Certifications: DCWF 8140
Years of experience: 8+
Source selection: PFITSS

View full job page →

1mo ago

Principal Cybersecurity Systems Security Officer

Amtrak Washington, DC 🇺🇸 Remote

Washington, DC

1mo ago Closed

$113k - $147k/yr Full time Senior DevSecOps GRC

This position is no longer accepting applications (closed Oct 31, 2026).

Job Description

The Principal Cybersecurity Systems Security Officer at Amtrak provides cybersecurity governance and risk management for assigned systems and services, with a focus on maintaining acceptable risk levels and audit readiness. This position establishes security governance practices, improves control effectiveness, and ensures security is built into system design and day-to-day operations while coordinating cybersecurity staff and partners to reduce risk and support operational objectives.

Key responsibilities

Develop and maintain security documentation, including System Security Plans (SSPs), Security Design Reviews, Secure Design Directives (SDDs), risk assessments, exception requests, and remediation plans.
Act as the primary cybersecurity advisor for Agile Release Trains (ARTs), working with business, portfolio, product, architecture, and engineering stakeholders to embed security-by-design, DevSecOps practices, and risk management into Program Increment (PI) Planning and solution delivery.
Lead security architecture and design reviews to uncover security gaps, evaluate risks, and select mitigating and compensating controls.
Lead assessment and audit assurance readiness by setting evidence strategies, maintaining high-quality security documentation, coordinating reviews, and ensuring timely closure of findings and gaps.
Drive security assessment and authorization or attestation activities by keeping security plans, control implementations, and decision artifacts current, traceable, and defensible.
Operate and evolve continuous monitoring programs by defining security telemetry needs, reviewing control health, overseeing vulnerability and configuration management activities, and tracking residual risk trends.
Lead risk decision-making, including prioritizing remediation, adjudicating exceptions and compensating controls, and escalating material risks with impact statements and recommended actions.
Coordinate with engineering, architecture, and operations stakeholders to integrate security requirements into system design, change management, release readiness, and lifecycle sustainment processes.

Required qualifications

Bachelor’s Degree or equivalent combination of education, training, and/or relevant experience.
7 years of relevant work experience, or 11+ years in lieu of degree.
ISC2 CISSP (Certified Information Systems Security Professional).

Preferred qualifications

Bachelor’s Degree in Cybersecurity, Information Systems, or equivalent combination of education, training, and/or relevant experience, plus 9 years of relevant work experience.
Industry-standard certifications such as CISM, CISA, CRISC, GCIH, GPEN, CEH, CHFI, Security+, CASP, OSCP, and others.

Tools, frameworks, and technologies

Agile Release Trains (ARTs), DevSecOps, Program Increment (PI) Planning
ISO/IEC 27001, NIST RMF, NIST CSF, CIS Controls
GRC tooling, OT/ICS, and DOT regulations

Location and work arrangement

Washington, DC, Philadelphia, PA, or Wilmington, DE (remote)
Work arrangement: 02-Remote Optional
Relocation offered: No
Travel requirements: 0 - 5%

Compensation

USD 113,200 - 146,664 per year.

Additional details

Minimum experience: 7 years
Requisition ID: 167049

Benefits

Health, Dental, and Vision Insurance
401K with Employer Match
Generous Paid Time Off
Wellness Programs
Railroad Retirement Benefits
Paid Caregiving Days and Backup Care
Health Savings Account
Public Service Student Loan Forgiveness
Fertility and Family Building Benefits
No-cost Personal Health Advocate
Student Loan Assistance
Adoption and Surrogacy Assistance
Medical Plan Opt-out Credit
Tuition and Education Reimbursement
Paid Family Leave
Life Insurance
Rail Pass Privileges
Short- and Long-term Disability Insurance
Employee Assistance Program
No-cost Financial Advisor Sessions
Commuter and Flexible Spending Accounts

Knowledge, skills, and abilities

Build cross-functional alignment and lead complex cross-functional programs.
Strong written and verbal communication skills, including translating technical findings and regulatory requirements.
Demonstrated experience performing security architecture reviews, risk assessments, threat modeling, vulnerability management, and security control evaluations across applications, infrastructure, networks, and cloud environments.
Demonstrated success building or scaling an ISSO/ISSM operating model across multiple products, platforms, or business units.
Expert knowledge of cybersecurity governance, risk management, and control frameworks, including mapping requirements to implemented controls and measurable evidence.
Design and operate continuous monitoring programs, including security telemetry, vulnerability management, configuration baselines, exception handling, and metrics.
Lead audit and assurance activities, including preparing control narratives, evidence packages, and stakeholder responses under tight deadlines.
Experience implementing or operating an ISO/IEC 27001-aligned information security management system (ISMS) and supporting external audits and attestations.
Strong knowledge of cybersecurity frameworks and standards, including NIST RMF, NIST CSF, CIS Controls, and other applicable industry and regulatory frameworks.
Knowledge of OT/ICS cybersecurity principles, including cyber-to-physical risk, safety impacts, and operational constraints that affect control selection and implementation.
Experience with GRC tooling (controls library management, evidence workflows, risk registers) and security KPI/KRI design.
Experience coordinating third-party risk and contract security requirements for cloud/SaaS and managed service providers.

View full job page →

1mo ago

Information Systems Security Engineer (ISSE)

General Dynamics Information Technology Fort Belvoir, VA

Fort Belvoir, VA

1mo ago Closed

$108k - $146k/yr Full time Engineer Information Security Information Systems Security

This position is no longer accepting applications (closed Oct 31, 2026).

Job Description

Grow your security engineering impact supporting RMF compliance through Assessment and Authorization (A&A) and Continuous Monitoring (ConMon) activities across multi-level classification environments. This onsite role at Fort Belvoir, VA pairs critical security engineering work with access to cutting-edge technologies and a team that coordinates across cybersecurity, technical services, and customer stakeholders.

Compensation for this position is USD 107,950 - 146,050 per year. The role is Secret clearance required and requires U.S. citizenship, with less than 10% travel.

What you’ll do

Coordinate with other DSMS program teams to plan and create cybersecurity architecture and design documents, ensuring compliance with DoD and other organizational IA policies and guidance.
Apply best practices for implementing security controls within an IS using software engineering methodologies, system/security engineering principles, secure design and architecture, and secure coding techniques.
Develop cybersecurity architecture and design plans for communication and collaboration products, operating system platforms (servers, devices, and management products), applications, and security considerations for product implementation.
Provide security engineering support for DSMS Network accreditation.
Integrate cybersecurity expertise into lifecycle management, including planning architecture and design management, migration and deployment, and system testing and implementation.
Research, develop, test, and document architectures and solutions for implementing new cybersecurity technologies to improve information collaboration and cybersecurity capabilities for the program and its user base.
Develop and deliver criticality analysis for logic-bearing system components (hardware, firmware, and software) and the functions they implement, protect, or that may introduce vulnerabilities.
Develop and maintain mission criticality analyses, vulnerability assessments, and risk assessments, including identification and countermeasure implementation for mission-critical functions, ensuring updated assumptions, rationale, results, supply chain risk information, and mitigations are available for Government review.
Prepare and submit Interim Authorization to Test (IATT) and Authority to Operate (ATO) requests with Plans of Action and Milestones (PoAMs).
Develop, maintain, and coordinate Body of Evidence (BoE) documentation for system assets.
Collaborate with Technical Services and Security Services teams, plus customer agency stakeholders, to support compliance.
Track lien remediation/resolution workflow and enter tracking tool updates; evaluate system change requests and assess both system and organizational risks tied to modifications.
Execute ConMon activities on established timelines, including BoE collection and tracking tool updates.
Conduct recurring reviews of system state and security posture to ensure secure operation and that information systems security policies and procedures are followed.
Recommend security control implementation and identify countermeasures or mitigating controls; respond to security information queries and report requests.
Support security incident investigations and report findings as needed.
Assist with communication, implementation, and enforcement of security policies and plans for data, applications, hardware, and telecommunications systems.
Advise stakeholders on information assurance standards, dependencies, and emerging security technologies; use Enterprise Security Services tools such as Trellix and ACAS to track and remediate vulnerabilities and compliance deficiencies.

What you’ll need

Bachelor of Arts / Bachelor of Science
2+ years of related experience
Secret security clearance level
U.S. citizenship required
Travel: less than 10%

Tools and technologies

Trellix
ACAS
Plans of Action and Milestones (PoAMs)
Body of Evidence (BoE)

Benefits and growth

401K with company match
Comprehensive health and wellness packages
Internal mobility team dedicated to helping you own your career
Professional growth opportunities, including paid education and certifications
Cutting-edge technology you can learn from and apply to solve real world problems

Additional details

Location: Fort Belvoir, Virginia (onsite / on customer site)
REQ#: RQ229469
Requisition type: Regular
Category: Cyber and IT Risk Management
Public trust: None
Work requirements: U.S. Citizenship Required; Travel Required: less than 10%

Identity verification process

You are expected to be on camera during virtual interviews.
We reserve the right to take your picture to verify your identity and prevent fraud.
You authorize the collection, processing, and use of your biometric data for identity verification and security purposes.

View full job page →

1mo ago

Senior Cybersecurity Engineer

G2 Ops, Inc. San Diego, CA

San Diego, CA

1mo ago Closed

$150k - $215k/yr Full time Senior Cyber Defense Cybersecurity

This position is no longer accepting applications (closed Oct 30, 2026).

Job Description

G2 Ops, Inc. seeks a Senior Cybersecurity Engineer to support complex Navy and Department of Defense mission systems across the system lifecycle.

Responsibilities

Apply cybersecurity engineering principles throughout the system lifecycle to identify, evaluate, and reduce cyber risk
Develop and use threat models to identify realistic adversary attack paths using methodologies such as STRIDE, PASTA, attack trees, or similar approaches
Analyze complex systems, networks, software architectures, configurations, and interfaces from a cybersecurity perspective
Identify vulnerabilities, attack techniques, system weaknesses, and potential mission impacts
Evaluate defensive technologies and mitigation approaches; translate cybersecurity findings into actionable engineering recommendations
Assess how cyber threats, vulnerabilities, architectures, configurations, and defensive measures may affect system and mission performance
Partner with systems engineers, software engineers, architects, and cybersecurity professionals to incorporate cybersecurity requirements into engineering decisions
Communicate technical findings, cyber risks, and recommended mitigations clearly to multidisciplinary engineering and customer teams
Support the development of more secure and cyber-resilient Navy and DoD mission systems

Requirements

Bachelor’s degree in Cybersecurity, Computer Engineering, Electrical Engineering, Electronics Engineering, Computer Science, Systems Engineering, or a related technical field
7+ years of relevant industry experience
Working knowledge of cybersecurity engineering principles, system and network security, vulnerability analysis, and cyber risk management
Experience analyzing complex systems, networks, or software architectures from a cybersecurity perspective
Demonstrated hands-on experience building and applying threat models to real systems (threat modeling is foundational; RMF or Assessment and Authorization experience alone does not satisfy this requirement)
Understanding of common cybersecurity vulnerabilities, attack techniques, defensive technologies, and mitigation approaches
Ability to translate cybersecurity findings into actionable engineering recommendations
Strong analytical, problem-solving, written communication, and technical communication skills
Ability to operate effectively as part of a multidisciplinary engineering team
IAM, IAT, and/or IASAE certification/qualification in accordance with DoD 8570.01
Must have an active DoD Secret Clearance and be able to obtain and maintain a TS/SCI clearance

Preferred Qualifications

Experience supporting DoD or government programs
Experience supporting Navy mission systems or similarly complex mission-critical environments
Familiarity with threat-modeling methodologies such as STRIDE, PASTA, and attack trees
Experience evaluating system architectures, networks, software, and defensive technologies for cybersecurity risk
Experience in cross-functional or customer-facing engineering environments

Security Clearance Requirement

Active DoD Secret Clearance required
Ability to obtain and maintain TS/SCI

Work Setting

Primarily Onsite

Benefits

100% company-paid insurance for medical, dental, and vision for eligible employees and family members
100% company-paid insurance for life, short-term disability (STD), and long-term disability (LTD) for eligible employees
401(k) plan with discretionary employer matching
10 paid holidays
Paid time off (PTO)
Educational assistance

AI at G2 Ops

Integrating AI into engineering, cybersecurity, operations, and decision-making workflows
Investing in secure AI tooling aligned with government security requirements
Developing practical, mission-focused applications across the company