Principal Cybersecurity Engineer

Overview Principal Cybersecurity Engineer LOCATION: Hanscom AFB, Bedford, MA Salary Range: $170-$185,000 annually* depending on experience, certifications, and qualifications JOB STATUS: Full-time CLEARANCE: TOP SECRET CERTIFICATION: CISSP TRAVEL: Limited; as needed Astrion has an exciting opportunity for a Principal Cybersecurity Engineer located at Hanscom AFB in Bedford Massachusetts providing support to the Air Force Life Cycle Management Center-Ground Base Air Defense Sensor division (AFLCMC/ESG). The ESG Division manages efforts focused on developing, acquiring, fielding and sustaining programs that support worldwide communications, Battle Management, Command & Control, Intelligence, Surveillance & Reconnaissance (C2ISR), Air/Ground Surveillance, Time Critical Targeting, Combat Identification, Radar Imagery, Integrated Air/Missile Defense, and Mobile/Fixed C2ISR Performance, Exploitation & Dissemination Facilities. Qualifications / Skills Citizenship: Must be a US citizenClearance: Must have a be able to maintain a Top Secret Level ClearanceEducation: BS/BA DegreeYears of Experience: 20 years of experience in the respective technical/professional discipline being performed, 10 of which must be in the DoDProficieny in:Risk Management Framework (RMF), with empasis on taking projects from Step 1 to Step 5Vulnerability Management, Tenable Nessus (ACAS-DoD version of Nessus)STIGsCISSP Certification Preferred Qualifications /Skills Experience with Cross Domain Solutions and USAF CDS-ECloud Service ModelsSupply Chain SecurityNIAPDoD Policies for Procedures for CybersecurityNetwork SecurityEndpointDoD Impact LevelsNSA Type 1 encryptionWorking with a CSSP - 16th AF Responsibilities Duties include, but not limited to: Cybersecurity & RMF Support Lead development and review of system security documentation including System Security Management Plans, Program Protection Plans, Security Risk Analyses, OPSEC Plans, and security CONOPS in accordance with DoDI 5000.02, DoDI 8510.01, MIL-STD-1785, and the Adaptive Acquisition FrameworkSupport system and application Authorization & Accreditation (A&A) activities under the Risk Management Framework (RMF), ensuring completeness, quality, and compliance of all artifactsManage RMF implementation activities including ATO/ATC, reciprocity, and ongoing continuous monitoringAdminister and manage eMASS system packages System, Network & Infrastructure Security Provide technical leadership in network and system architecture design with an emphasis on cybersecurity, including DoD and joint networking environmentsSupport cross-domain solutions (CDS), Commercial Solutions for Classified (CSfC), and NSA approval processesAssess and mitigate system, network, and application vulnerabilities, including ACAS scanning and STIG implementationRecommend security configurations, software changes, and compensating controls to mitigate risk Risk, Compliance & Policy Conduct cybersecurity risk and vulnerability assessments across planned and fielded systemsDevelop risk-based mitigation strategies and advise leadership on security tradeoffs impacting mission executionRecommend and update cybersecurity policies, procedures, and contingency plans, including disaster recoverySupport waivers and deviations for mandated security controls when required to meet mission performance needs Program Security & Classified Information Support Provide acquisition program security support throughout the system lifecycle, including source selectionsMaintain and audit classified information databases, visit records, clearance tracking, and classified holdingsEvaluate contractor classified data submissions for compliance with System Security Classification Guides (SSCGs)Update security classification guides and prepare acquisition security documentation Leadership, Collaboration & Training Advise government leadership on cybersecurity design, implementation, and complianceCollaborate with government and commercial stakeholders to achieve RMF authorization approvalsDevelop and deliver cybersecurity awareness and training programs