Senior Cybersecurity Engineer (Controls & Assessment Lead)
Responsibilities
Lead security controls assessment and implementation for technology integration pilots
Establish risk frameworks for pilot design and execution activities
Ensure compliance with federal security requirements (NIST, FISMA, FedRAMP)
Conduct security assessments of proposed technology insertions
Define security boundaries and controls for pilot environments
Coordinate with RMF and security teams on authorization activities
Ensure pilots maintain security posture and avoid becoming security liabilities
Assess security readiness for scaling pilots into production
Develop security metrics for measuring pilot and production outcomes
Lead security governance review processes and decision points
Ensure alignment with CISA Zero Trust Strategy and security architecture
Conduct risk assessments for technology insertions across federated environments
Support continuous monitoring and security validation of integrated capabilities
Provide security guidance to development and operations teams
Document security controls, procedures, and compliance evidence
Requirements
U.S. Citizenship
Active TS/SCI clearance
Ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD) Suitability
10+ years of experience in cybersecurity engineering or security architecture
Expert knowledge of federal security frameworks (NIST 800-53, RMF, FISMA)
Strong understanding of risk management and security controls implementation
Experience leading security assessments and authorization activities
Knowledge of Zero Trust architecture and implementation principles
Experience assessing security of AI/ML and emerging technologies
Strong analytical and problem-solving skills
Excellent documentation and communication abilities
Qualifications
BS in Cyber Security, Computer Science, or related degree; Master’s degree preferred, or HS Diploma and 7+ years of directly relevant experience
Skills
ITIL, PMP, or similar operations/project management certification
Experience with CISA programs or similar federal cybersecurity operations
Background in security assessment of malware analysis platforms
Experience with cloud security assessment and authorization
Knowledge of critical infrastructure security requirements
Experience with continuous monitoring and automated compliance tools
Familiarity with DevSecOps and security automation practices
Background in penetration testing or vulnerability assessment
Benefits
Nightwing is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.
Pay
TBD
Schedule
TBD