Senior Cybersecurity Engineer

This is a fully remote position, open to applicants in Pennsylvania.

📋 Description

• Establish and direct the security architecture, engineering standards, procedures, technologies, security requirements, and verification practices across intricate enterprise environments.

• Deliver technical leadership and oversight to the ISSO and ISSE teams engaged in security engineering, compliance, continuous monitoring, and remediation efforts.

• Conduct risk assessments, security-control evaluations, security strategy formulation, service design, vulnerability management, and other extensive cybersecurity program initiatives.

• Supervise ATO and System Security Plan activities, ensuring adherence to Zero Trust principles, continuous monitoring, and federal security mandates.

• Design and oversee static and dynamic application security testing, penetration testing, vulnerability analysis, and remediation in partnership with development teams.

• Articulate security requirements, risks, vulnerabilities, compliance issues, and actionable remediation recommendations to government and cross-functional stakeholders.

• Function across Agile, DevSecOps, cloud, development, testing, integration, and production environments.

• Provide technical guidance to Information Systems Security Officers and Information Systems Security Engineers.

• Undertake additional tasks and responsibilities as necessary to support team goals and ensure project success.

• Travel to the Washington, DC metropolitan area as required for onsite meetings, program activities, and customer requirements.

⛳️ Requirements

• Bachelor’s degree in Information Technology, Information Assurance, Cybersecurity, or a related field, with a minimum of 10 years of relevant experience; additional applicable experience may replace a degree.

• At least five years of experience leading large security-engineering, ISSO, or ISSE teams.

• Current Certified Information Systems Security Professional certification.

• Minimum of five years of security-engineering experience supporting Agile, Scrum or SAFe, DevSecOps, and cloud-based projects.

• Comprehensive knowledge of ATOs, System Security Plans, Zero Trust principles, continuous monitoring, security-control assessments, risk management, and federal security policies.

• Practical experience with application security testing, penetration testing, encryption, communication protocols, access control, PKI, incident response, and defense-in-depth architectures.

• Excellent communication, leadership, mentoring, customer engagement, collaboration, analytical, and remediation planning skills.

• Information Systems Security Engineering Professional certification.

• Experience working with the U.S. Census Bureau, Department of Commerce, or similar civilian federal information systems.

• Familiarity with applying NIST Risk Management Framework, NIST SP 800-53, FISMA, FedRAMP, and federal Zero Trust requirements in cloud and DevSecOps settings.

• U.S. Citizenship is required.

• Must successfully complete a background check.

• Ability to obtain and maintain a Government/Public Trust clearance, including necessary fingerprinting when required for the position.

• Must reside within the continental U.S.

• Sponsorship is not available.

🏝️ Benefits

• Medical/Dental/Vision.

• 401k with Employer Match.

• PTO + Federal Holidays.

• Corporate Laptop.

• Training Opportunities.

• Remote Opportunity.