Cybersecurity Engineer- CBP

About the role

The Cybersecurity Engineer supports the U.S. Customs and Border Protection (CBP) Operational Technology Operations Center (OTOC) and the build‑out, integration, and operation of the Office of Information and Technology (OIT) ISS OTOC. The position provides cybersecurity engineering, vulnerability management, incident response, risk assessment, and Risk Management Framework (RMF) support for complex operational technology (OT) and mission systems. The engineer translates operational and technical requirements into practical security requirements, identifies and assesses vulnerabilities, determines security and mission risk, and helps engineering and program teams make informed decisions throughout the system lifecycle.

Location: Ashburn, VA (onsite) | Travel: Less than 10% | Security Clearance: Must possess existing DHS EOD or DHS Suitability.

Responsibilities

• Cybersecurity Engineering & Architecture: Provide engineering support for integration, deployment, authorization, and sustainment of OTOC operational technology and mission systems; translate mission and system requirements into actionable cybersecurity requirements and secure architectures; evaluate designs, configurations, and interfaces to identify risks and attack surfaces; integrate security requirements throughout the system lifecycle; guide applications, data platforms, tactical communications, mission networks, and authorized effectors; collaborate with cross‑functional teams to resolve security issues while maintaining mission performance.

• Vulnerability & Risk Management: Identify, analyze, prioritize, remediate, and track vulnerabilities across applications, infrastructure, networks, and OT environments; assess vulnerabilities in the context of architecture, mission impact, and threat exposure; translate technical findings into clear risk information for owners and leadership; develop mitigation strategies and work with engineering teams to implement controls; track deficiencies through resolution and ensure risks are mitigated, accepted, or otherwise managed.

• Incident Response & Security Operations: Support identification, analysis, investigation, containment, remediation, and recovery of cybersecurity incidents affecting mission systems and OT environments; collaborate with operations, engineering, and program teams to assess impact and implement corrective actions; support post‑incident analysis, lessons learned, and incorporation of findings into vulnerability management and risk mitigation; participate in incident‑response exercises, technical investigations, and recovery activities.

• RMF & Authorization Support: Perform RMF activities throughout the system lifecycle, including security categorization, control implementation, assessment, remediation, and continuous monitoring; develop and maintain ATO artifacts such as risk assessments, security plans, POA&Ms, control assessments, and vulnerability assessments; support audits, inspections, and technical reviews; ensure continuous monitoring and ongoing authorization to keep systems secure and operational.

• Mission & Cross‑Functional Cybersecurity Support: Serve as a technical advisor to systems engineering, software, infrastructure, operations, cybersecurity, and program leadership; provide expertise from requirements definition through sustainment; work closely with engineering and program teams to embed cybersecurity considerations; communicate risks and recommendations to both technical and non‑technical stakeholders.

• Standards, Threats & Cybersecurity Practices: Stay current with applicable cybersecurity standards, RMF requirements, vulnerability management practices, emerging threats, and relevant technologies; apply evolving practices and threat intelligence to support risk‑informed security decisions and system protection.

Requirements

• Current DHS Suitability or ability to obtain and maintain suitability.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Systems Engineering, or a related technical discipline (or equivalent directly relevant professional experience).
• 5+ years of experience in cybersecurity engineering, information security, systems engineering, vulnerability management, or a closely related technical field.
• Experience supporting mission‑critical systems with high availability, real‑time communications, or demanding operational constraints.
• Demonstrated experience with cybersecurity engineering, vulnerability management, risk assessment, and security architecture across complex systems, applications, infrastructure, networks, or OT environments.
• Experience supporting cybersecurity incident response (analysis, investigation, containment, remediation, recovery, post‑incident activities).
• Experience applying FISMA, NIST cybersecurity standards, and the Risk Management Framework (RMF) to government information systems.
• Experience supporting systems through the security assessment and authorization/ATO lifecycle, including control implementation, assessment, remediation, authorization, and continuous monitoring.
• Experience developing and maintaining System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), Security Assessment Reports (SARs), control implementation statements, security assessments, authorization evidence, system inventories, network diagrams, and data‑flow diagrams.
• Ability to analyze technical vulnerabilities, assess operational and mission impact, and develop risk‑based remediation or mitigation strategies.
• Experience translating mission and operational requirements into cybersecurity requirements, security controls, and practical technical solutions.
• Proven ability to work with system owners, engineers, authorizing officials, security leadership, program managers, and senior government stakeholders to resolve risks and support authorization decisions.
• Strong communication skills to convey complex cybersecurity risks and technical findings clearly to both technical and non‑technical audiences.

Preferred Qualifications

• Cybersecurity certification such as CISSP, CISM, Security+, GSEC, or equivalent.
• Experience with government security authorization, RMF, vulnerability management, and continuous monitoring platforms/tools.
• Familiarity with security operations and monitoring technologies (SIEM, EDR/XDR, IDS/IPS, threat intelligence, security analytics, incident response platforms).
• Knowledge of Zero Trust architecture and identity‑centric security (IAM, PAM, endpoint security, threat detection, access control).
• Experience supporting incident‑response exercises, tabletop exercises, after‑action reviews, and remediation activities.
• Experience with cloud security and hybrid infrastructure (AWS, Azure, or other government‑authorized cloud environments).
• Experience integrating cybersecurity into DevSecOps, software development, CI/CD, or automated security testing environments.
• Experience assessing software, hardware, third‑party, and supply‑chain cybersecurity risks.
• Experience supporting FISMA reporting, federal cybersecurity assessments, agency policies, governance processes, and compliance activities.
• Experience developing or reviewing security architectures, system boundaries, interconnections, attack surfaces, threat models, and cybersecurity requirements.

About Sherpa 6

Sherpa 6 is a Service‑Disabled Veteran Owned Small Business that solves problems with user‑focused, design‑driven solutions. The team is composed of forward‑thinking, collaborative professionals who are passionate about building innovative solutions with bleeding‑edge technology. Sherpa 6 is dedicated to protecting and giving Warfighters the edge they need in the field.

Benefits

• Competitive medical coverage for employee and family.
• Dental, vision, health, and wellness benefits.
• Generous retirement savings plan.
• Generous paid time off (PTO) policy to support work‑life balance.

Pay

Salary range: $120,000 – $160,000, reflective across all Sherpa 6 locations and adjusted based on geographic location, experience, skills, education, and certifications.