Senior Cybersecurity Engineer

About the Role

As part of the Cyber Risk and Resilience Directorate, you will join a team of cyber security engineers applying the latest tools, techniques, and methods to cyber security and operational resilience challenges. The Senior Cybersecurity Engineer will work directly with leaders in government, academia, and industry to protect services and capabilities critical to national security and economic stability.

The role supports the operational capabilities and evolution of the Cybersecurity Assurance Team (CA Team), focusing on cybersecurity, operational resilience, and applied research. The CA Team develops frameworks, models, tools, policies, practices, technical guidance, and training to help industry, government, and military components measure and improve their management of operational and technical risks, including those introduced by artificial intelligence and agentic-driven systems.

Responsibilities

• Lead engagements with customers and mission partners, representing the CA Team’s and SEI’s work.
• Contribute to customer projects advancing the state of the art in cybersecurity, including presenting the SEI’s mission and work to stakeholders.
• Engage with communities of interest through publications, presentations, and relationship-building with research and technology communities.
• Serve as a trusted advisor to defense and critical infrastructure customers, collaborating on multidisciplinary teams to solve complex challenges.
• Support cybersecurity assessment standardization, develop and employ security measurement approaches, and transition expertise to the broader community.
• Conduct research into novel methods and approaches for managing cybersecurity resilience across disciplines such as cyber operations, AI, continuity planning, and organizational/social mitigations.
• Dedicate 5% of time to professional development, staying current on emerging trends and topics relevant to the team’s portfolio.

Requirements

• BS degree in a relevant discipline with 10 years of applicable experience, or an MS degree with 8 years, or a PhD with 5 years.
• Track record of successfully leading technical projects with user-centered, high-impact outcomes.
• Ability to lead diverse teams, analyze and solve real-world problems, and develop engineering guidance.
• Experience contributing to multiple simultaneous projects in a creative, dynamic environment.
• Strong mentorship skills to motivate and empower less-experienced team members.
• Outstanding communication skills, including the ability to present complex ideas to non-experts and collaborate diplomatically with stakeholders at all levels.
• Frequent travel (15-35%) to customer sites, conferences, and offsite meetings.
• Ability to obtain and maintain a Department of War security clearance; must be legally authorized to work in the U.S. without visa sponsorship.

Skills

Candidates should have experience or knowledge in several of the following areas:

• Mid to senior-level industry experience managing information security risks and implementing controls.
• Mid to senior-level experience managing technology controls and risks (e.g., change management, infrastructure, cloud services, capacity planning).
• Mid to senior-level experience managing continuity-related controls and risks (e.g., business continuity, disaster recovery).
• Experience deploying information technology (e.g., implementing security tools, designing/maintaining networks).
• Consulting experience with private industry or government customers, including leading projects.
• Familiarity with cybersecurity and resilience standards (e.g., NIST CSF, NIST SP 800 series, ISO 27000 series).
• Knowledge of audit and assessment methodologies, tactics, techniques, and procedures.
• Understanding of critical infrastructure protection concepts and standards.
• Familiarity with maturity model concepts (e.g., CMMI, Financial Sector Cyber Profile).
• Strong collaborative and diplomatic skills for working with customers, colleagues, and stakeholders.

Desired Qualifications

• Strong writing and editing ability.
• Experience functioning as a member of process action teams or instructional design working groups.
• Experience with course and information mapping, flowcharting, or similar methodologies.
• Relevant certifications (e.g., CISSP, CISM, CISA, PMP, CCNA-Security, SSCP, Network+ CE, A+ CE, CND) or equivalent experience.
• Military experience (beneficial but not required) for understanding the institute’s mission and stakeholders.

Benefits

• Comprehensive medical, prescription, dental, and vision insurance.
• Generous retirement savings program with employer contributions.
• Ample paid time off and observed holidays.
• Life and accidental death and disability insurance.
• Free Pittsburgh Regional Transit bus pass.
• Access to the Family Concierge Team for childcare navigation.
• Fitness center access and additional wellness perks.

Location

Arlington, VA or Pittsburgh, PA