Senior Cyber Risk Engineer

About the role

Cybersecurity Risk Engineers at the SEI use advanced skills in statistics, mathematics, risk analysis, systems engineering, economics and other technical fields in an interdisciplinary manner to help our government and industry mission partners to identify, research, and solve cyber security challenges.

Responsibilities

• Work with mission partners to identify areas where advanced quantitative & technical skills can help tackle problems.
• Plan and develop prototype solutions.
• Create final products designed to better manage risk.
• Work with cyber security professionals and university collaborators to build new technologies that will influence national cyber security strategies for decades to come.
• Build and evaluate models, create products, conduct applied research, present findings to stakeholders, and develop transition plans for solutions to our partners.
• Work on a wide range of projects including experimental designs for measuring cyber risk, researching methodologies for improvement of risk-based decision making, and building and evaluating models to identify security vulnerabilities.
• Conduct organizational security assessments, evaluate risk management programs, threat modeling, economics of cybersecurity and measurement.

Requirements

• Education and Experience: BS degree in Computer Science, Statistics, Engineering, Mathematics, Economics, Data Science, or a related highly quantitative discipline with ten (10) years of applicable experience; or a MS degree in a relevant discipline with eight (8) years of applicable experience; or a PhD in a relevant discipline with five (5) years of applicable experience.
• Technical Excellence: Track record of applying advanced analytical methods to solve complex cybersecurity challenges and delivering impactful technical outcomes. Expertise in one or more areas including cybersecurity risk management, risk quantification, statistics, econometrics, systems engineering, machine learning, modeling and simulation, or data science. Practical solutions that improve risk-based decision making for mission partners.
• Leadership: Ability to lead multidisciplinary teams in analyzing and solving real-world cybersecurity and risk management problems. Guide research efforts, develop analytical frameworks, and influence technical direction while collaborating with researchers, engineers, government stakeholders, and external partners. Technical influence and collaboration beyond formal reporting relationships.
• Working in a Creative, Dynamic Environment: Experience contributing to multiple simultaneous projects and thriving in a fast-paced research environment. Experiment with innovative analytical techniques, explore emerging technologies, and develop new methodologies that advance cybersecurity risk management and measurement.
• Mentorship: Enjoy mentoring and motivating team members. Contribute to the development of technical talent through knowledge sharing, collaboration, and professional guidance.
• Communication: Outstanding communication skills. Interact collaboratively and diplomatically with customers, mission partners, researchers, and colleagues at all levels. Understand both strategic objectives and technical details and communicate complex analytical findings to audiences with varying levels of technical expertise.
• Travel: Periodic travel to customer sites, conferences, workshops, and stakeholder meetings is required to support the SEI's mission and research activities.

Qualifications

• Knowledge, Skills, and Abilities: Experience or knowledge in several of the following: Understanding of risk management principles and their application to cybersecurity. Experience performing cyber risk analysis, risk quantification, or security measurement. Expertise in one or more quantitative disciplines such as statistics, mathematics, econometrics, operations research, systems engineering, data science, or machine learning. Experience developing and applying statistical models, predictive analytics, or simulation techniques. Experience with uncertainty quantification, probabilistic analysis, or decision science methodologies. Experience conducting threat modeling, vulnerability analysis, or security assessments. Knowledge of cybersecurity risk management frameworks and methodologies. Experience evaluating organizational cybersecurity programs and risk management practices. Ability to design and conduct applied research in cybersecurity, risk management, or related fields. Experience developing analytical tools, models, or decision-support capabilities. Ability to collaborate effectively within multidisciplinary teams of researchers, engineers, and cybersecurity professionals. Strong analytical, problem-solving, and critical-thinking skills. Ability to communicate complex technical concepts and analytical findings to both technical and non-technical audiences. Ability to work collaboratively, diplomatically, and effectively with customers, colleagues, researchers, and senior stakeholders.