Cyber Security Engineer

About the Company

By Light Professional IT Services LLC equips warfighters and federal agencies with technology and systems designed to connect, protect, and prepare individuals and teams for evolving challenges. Headquartered in McLean, VA, By Light serves defense, civilian, and commercial IT customers globally. Cole Engineering Services (CESI), a By Light company, is a premier provider of modeling and simulation (M&S) training solutions to the Federal Government and industry. Since 2004, CESI has led the development, maintenance, and integration of simulation-based training, serious gaming, technical services, and support across live, virtual, constructive, and gaming (LVCG) domains. CESI also designs, builds, and operates infrastructure, platforms, applications, and processes enabling cyber training for the integrated multi-domain force. Our vision is to become a worldwide full-spectrum LVCG and cyber training/analysis developer, integrator, and services provider.

About the Role

Provide cybersecurity engineering support to DoD software application development activities through cybersecurity requirements definition, process enhancements, and application security testing.

Responsibilities

• Define cybersecurity requirements for software applications to meet program requirements and objectives.
• Provide recommendations to incorporate security engineering practices throughout the system development lifecycle.
• Perform assessments of cybersecurity requirement compliance using manual and automated software analysis tools and methods; present findings to the customer as necessary.
• Perform assessments using adversarial tools, techniques, and methods against network-enabled applications and web applications to identify weaknesses, gaps, and vulnerabilities.
• Propose mitigation and countermeasures to reduce or eliminate software-level threats.
• Directly interface with the software development team to ensure software security engineering principles are applied throughout the system development lifecycle.
• Provide technical leadership and mentorship to junior cybersecurity engineers, fostering skill development, adherence to cybersecurity best practices, and continuous learning.

Requirements

• Bachelor's Degree in Computer Science, Engineering, Cybersecurity, IT, or related field required. Professional and/or military experience may be substituted in lieu of degree.
• Experience in software engineering, development, and/or systems engineering throughout all phases of the system development lifecycle.
• Systems administration skills, experience with Linux, security settings, services, hardening of systems (STIGs, security policies); shell scripting or Python a plus.
• System troubleshooting, recovery, and advisory in the event of unexpected adverse configuration changes.
• Knowledge of threat assessment and solutions to mitigate or eliminate such threats.
• Experience with offensive security tools and adversarial techniques and methods.
• Experience implementing software application solutions to comply with NIST SP 800-53 security controls.
• Compliance and vulnerability reporting and similar formal technical documentation skills.
• Understanding of Risk and Compliance Frameworks.

Preferred Qualifications

• Understanding of DoD acquisition processes and relevant cybersecurity processes, such as the Risk Management Framework (RMF).
• Desired Certifications: CISSP, OSCP, GPEN, GWAPT, GSSP, CEH.

Special Requirements

• This position requires certifications necessary to meet IAT Level II in accordance with DoD 8570 baseline certifications. IAT Level II certification is required immediately upon hire.
• Current certification status will be maintained by obtaining continuing education as specified by the certification authority.
• U.S. Citizenship status with a current SECRET security clearance, with the ability to attain a TOP SECRET/SCI clearance, is required.

Benefits

• Medical, Dental & Vision Coverage
• Wellness Program
• 401(k) Matching
• Disability (Short Term & Long Term)
• Employee Assistance Program
• Life Insurance
• Education & Training
• Generous Leave Policy (11 Federal Holidays, PTO, Military Leave, Bereavement, and Jury Duty)