Sr IT Security Engineer

About the role

Overview GovCIO is currently hiring for an IT Security Engineer Senior to support the 16AF/AF IC zero trust initiative. This position will be located at Joint Base San Antonio, Lackland and will be an onsite position.

Responsibilities

• Support Air Force Intelligence Community mission systems in the implementation, assessment, and continuous monitoring of cybersecurity requirements.
• Lead Risk Management Framework activities, develop and tailor security controls, strengthen cloud security architectures, and advance Zero Trust capabilities across classified and unclassified environments.
• Lead and support RMF activities, including system categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
• Develop, tailor, document, and validate security controls and implementation statements using NIST, DoD, Air Force, and Intelligence Community requirements.
• Prepare and maintain System Security Plans, Security Assessment Reports, Plans of Action and Milestones, risk assessments, and authorization packages.
• Advise program managers, system owners, ISSOs, ISSMs, engineers, and Authorizing Officials on cybersecurity risks and remediation strategies.
• Assess cloud architectures and services for compliance with security, privacy, identity, logging, encryption, data protection, and boundary requirements.
• Support Zero Trust implementation, including identity-centric access control, least privilege, device trust, segmentation, continuous verification, and data-centric security.
• Conduct security control assessments, vulnerability reviews, configuration assessments, and continuous monitoring activities.
• Coordinate remediation of findings and track risks through closure or formal risk acceptance.
• Support security architecture reviews, system design assessments, and mission-impact analyses.
• Develop cybersecurity documentation, briefings, risk reports, and executive-level recommendations.

Qualifications

Required Skills and Experience

• Clearance: TS/SCI
• High school diploma with 9+ years’ experience in cybersecurity, computer science, information systems, engineering, or a related discipline.
• Eight or more years of information security or cybersecurity engineering experience, including significant federal, DoD, Air Force, or Intelligence Community work.
• Must possess and maintain active certification that meets DOD 8570 IAT III in lieu of DoD 8140 job code 633 System Security Engineer.
• Understanding of systems security design and engineering principles.
• Knowledge of cybersecurity and zero trust reference architectures.
• Strong understanding of SIEM systems.
• Strong understanding of security for cloud-based platforms and applications.
• Excellent communication skills (spoken and written).
• Experience creating security workflows and diagrams based on system architecture.
• Understanding of Model Based Systems Engineering and the correlation to cybersecurity.
• Demonstrated experience executing RMF activities for moderate- or high-impact systems.
• Strong working knowledge of NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, and applicable DoD or Intelligence Community cybersecurity guidance.
• Experience developing, tailoring, implementing, and assessing security controls.
• Experience preparing authorization packages and working with system owners, ISSOs, ISSMs, security assessors, and Authorizing Officials.
• Practical knowledge of cloud security architectures, including identity and access management, encryption, logging, network security, configuration management, and secure service deployment.
• Knowledge of Zero Trust principles and architectures, including identity, device, application, network, and data protection.