Principal Cyber Security Engineer

As a Principal Cyber Security Engineer, you will join a small team of security engineers providing Information Assurance (IA) Architecture Analysis and Security Engineering Support. You will perform in a consultant-like role providing technical knowledge, expertise, and advice to customers.

The Principal Cyber Security Engineer shall deliver and lead threat-informed cybersecurity products, including:

• Conducting cybersecurity risk assessments and providing prioritized risk mitigation recommendations
• Supporting the design, implementation, and operation of real-time capabilities to discover, detect, analyze, and mitigate threats and vulnerabilities
• Analyzing candidate architectures to identify security gaps and providing recommended mitigation strategies
• Researching and evaluating emerging technologies to determine cybersecurity effectiveness
• Aiding stakeholders through the development, refinement, delivery, and implementation of innovative solutions and capabilities
• Engaging stakeholders to ensure security objectives, protection needs, security requirements, and associated validation methods are defined
• Validating and verifying system security requirements definitions and analysis
• Establishing system security design
• Designing, developing, implementing, and integrating IA and security systems and system components
• Assisting architects and systems developers in the identification and implementation of appropriate information security functionality
• Contributing to security planning, assessment, risk analysis, risk management, certification, and awareness activities

CLEARANCE REQUIRED: Active TS/SCI with polygraph.

Qualifications

• Bachelor of Science degree from an accredited university in Computer Science, Information Assurance, Information Security System Engineering, or a related field
• Minimum of 20 years of experience as an Information Systems Security Engineer (ISSE) or System Engineer
• CISSP - ISSEP required
• Strong writing skills
• Confidence and ability to present briefings to senior-level DoD officials
• Expertise in the Risk Management Framework (RMF) and conducting cybersecurity risk assessments
• Expertise in network technology and systems security engineering
• Experience with security monitoring and incident response capabilities
• Experience with emerging technologies such as Zero Trust, Cloud Computing, etc.
• Knowledge of NIST Special Publications 800 Series, CNSSI 1253, and DoD 8500