Senior Cyber Security Engineer

Responsibilities

• Support cybersecurity engineering and ISSE activities for UGS and operational technology systems, emphasizing lab validation, security readiness, and documentation.
• Assist CSD VAT and Nessus scan readiness by handling asset identification, scan scope planning, credential availability, scan limitations, vendor constraints, and device impact considerations.
• Support CSD SOC and Splunk readiness by identifying available telemetry and log sources, understanding logging limitations, defining monitoring requirements, and identifying security-relevant events.
• Validate firmware/software updates, review vendor security release notes, perform checksum/hash validation, and track security impacts.
• Document vulnerabilities and findings, including limitations, remediation actions, compensating controls, and retest results for lab validation and ATO evidence support.
• Provide security input to lab test plans, validation packages, acceptance recommendations, and Phase 2 handoff materials.
• Support configuration and change management by assessing whether proposed changes affect validated baselines, security posture, scanning needs, monitoring requirements, or field-alignment readiness.
• Coordinate with stakeholders to support secure integration and validation of UGS technologies.
• Maintain security documentation such as scan readiness checklists, vulnerability tracking, security considerations, and ATO evidence inputs.
• Provide security guidance to lab team members and support security audits, assessments, and evidence requests as needed.
• Assist with lab incident and security event handling by documenting events, assessing validation impact, preserving evidence, and coordinating with the appropriate stakeholders.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field; equivalent experience may be considered.
• Minimum 5–7 years of experience in cybersecurity, security engineering, ISSE, vulnerability management, or security assessment roles.
• Experience supporting RMF, ATO, POA&M, security control evidence, vulnerability remediation, or continuous monitoring activities.
• Experience with vulnerability scanning tools such as Tenable Nessus or equivalent.
• Familiarity with SIEM and logging platforms such as Splunk, including the ability to identify useful telemetry and log sources.
• Experience assessing or supporting network-connected devices, embedded systems, operational technology, IoT, cameras, sensors, or field technology environments.
• Understanding of security hardening, firmware/software update validation, configuration baselines, change control, and risk documentation.
• Ability to clearly document technical findings, limitations, test results, and security recommendations for technical and program stakeholders.
• Ability to coordinate across cybersecurity, engineering, network, test, vendor, and program teams.
• Strong analytical, troubleshooting, and communication skills.
• Experience in DHS/CBP environments and familiarity with NIST, FISMA, RMF, or federal cybersecurity requirements preferred.

Technologies

• Tenable Nessus
• Splunk

Work Location and Clearance

• Location: Onsite, Ashburn, VA
• Clearance: Public Trust (successful completion of government background investigation)

Certifications

• CompTIA Security+ or equivalent baseline cybersecurity certification required or strongly preferred.
• Preferred: CISSP, CISM, CISA, CASP+, CySA+, or equivalent.
• Beneficial: Tenable/Nessus, Splunk, vulnerability management, incident response, or continuous monitoring certifications.
• Plus: Operational technology, IoT security, or industrial/field technology security training.

Benefits

• Competitive pay and benefits packages
• Health care
• Dental
• Vision
• Life insurance
• 401(k)
• Education assistance
• Paid time off including PTO, holidays, and any other paid leave required by law