Senior Cyber Security Engineer

Overview SENIOR CYBERSECURITY ENGINEER LOCATION: Hanscom AFB, Bedford, MA Salary Range: $155,000 - $165,000 JOB STATUS: Full-time CLEARANCE: Secret CERTIFICATION: CISSP Astrion has an exciting opportunity for a Senior Cybersecurity Engineer providing support to the Air Force Life Cycle Management Center-Ground Base Air Defense Sensor division (AFLCMC/ESG). The ESG Division manages efforts focused on developing, acquiring, fielding and sustaining programs that support worldwide communications, Battle Management, Command & Control, Intelligence, Surveillance & Reconnaissance (C2ISR), Air/Ground Surveillance, Time Critical Targeting, Combat Identification, Radar Imagery, Integrated Air/Missile Defense, and Mobile/Fixed C2ISR Performance, Exploitation & Dissemination Facilities. Required Qualifications / Skills Citizenship: Must be a US citizenClearance: Active Secret clearanceCertification: CISSP Certification Preferred Qualifications PREFERRED QUALIFICATIONS / SKILLS Education: Bachelor’s degree in a professional engineering discipline from an ABET-accredited educational program and at least 10-15 years of experience in the respective technical/professional discipline, 10 of which must be in the DoD. Understanding of cybersecurity in DoD cloud infrastructure. Knowledge of Agile methodologies including CI/CD, DevSecOps, and DevOps. Expereinece with systems analysis and eMASSStrong ability to communicate technical topics effectively in both written and verbal forms. Technical Skills STIG complianceRisk Management Framework (RMF) implementation and documentation. DoD cybersecurity policies and compliance. System Authorization and Accreditation (A&A) processes. DoD cloud infrastructure security. Agile development methods including CI/CD, DevSecOps, and DevOps. Security risk, vulnerability, and contingency planning. PKI management and access control. Classified material handling and accountability. Interpersonal Skills Strong verbal and written communication skills for both technical and non-technical audiences. Ability to collaborate with government, contractor, and industry stakeholders. Effective problem-solving and analytical thinking. Ability to work independently and manage multiple priorities in a fast-paced environment. Adaptability to evolving program requirements and security challenges. Responsibilities Duties include, but not limited to: Assist with the installation, configuration, and maintenance of ACAS components, including Nessus scanners, SecurityCenter/Tenable.sc, and Nessus Network Monitor (NNM)/Tenable.asm. Assist in scheduling and executing vulnerability scans using Nessus scanners. Analyze scan results to identify vulnerabilities, and misconfigurations. Direct DISA STIG-based configuration hardening across multi-classification networksAssist with compliance assessments against DoW standards and internal security policies. Generate reports on vulnerability status, compliance posture, and remediation progress. Collaborate with system administrators to facilitate vulnerability remediation efforts. Assist with system administration tasks for ACAS servers and databases. Manage cybersecurity incident reporting and conduct root‑cause analysisDevelop corrective action plans and maintain POA&MsStay up to date on the latest vulnerability trends and security threats.