OverviewCYBER SECURITY ENGINEER
LOCATION: Omaha NE
SALARY RANGE: $145,000 - $155,000 annually
*depending on experience, certifications, and qualifications
JOB STATUS: Full-time;salaried
CLEARANCE: Secret clearance
Astrion has an exciting opportunity for a Cybersecurity Engineer providing support to the Command, Control, Communications (C3C)/Kessel Run division.
Kessel Run is an Air Force unit that delivers resilient command and control and targeting software capabilities that provide warfighters with decision advantage. Under the Department of the Air Force Program Executive Office for Command, Control, Communication, and Battle Management (DAF PEO C3BM), Kessel Run technologies make up the DAF BATTLE NETWORK, the systems-of-systems designed to help the Joint Force make operational decisions faster than our adversaries. The Division architects and acquires the means to connect weapon systems with warfighters and decision makers to enable the warfighter to win against the pacing challenge in an era of great power competition.
This is a full time position located at Offutt AFB, Nebraska, and does have the ability to be worked remotely.
REQUIRED QUALIFICATIONS / SKILLS
Citizenship: Must be a US citizen
Minimum Required Qualifications
Clearance: Must have and be able to maintain a Secret Level Clearance
Preferred Qualifications
Education: Bachelor's or Master's Degree in a related field
Years of experience: 3+ years of experience with 3+ years of experience in the DoD
- Understanding of cybersecurity in DoD cloud infrastructure
- Understanding of Agile methods, including CI/CD, DevSecOps, and DevOps
- Possess the ability to effectively communicate in both written and verbal forms on highly technical topics
PREFERRED QUALIFICATIONS / SKILLS
Technical Skills
- STIG compliance
Risk Management Framework (RMF) implementation and documentation.
DoD cybersecurity policies and compliance.
System Authorization and Accreditation (A&A) processes.
DoD cloud infrastructure security.
Agile development methods including CI/CD, DevSecOps, and DevOps.
Security risk, vulnerability, and contingency planning.
PKI management and access control.
Classified material handling and accountability.
Interpersonal Skills
Strong verbal and written communication skills for both technical and non-technical audiences.
Ability to collaborate with government, contractor, and industry stakeholders.
Effective problem-solving and analytical thinking.
Ability to work independently and manage multiple priorities in a fast-paced environment.
Adaptability to evolving program requirements and security challenges.
RESPONSIBILITIES
Duties include, but not limited to:
- Carry out ISSO duties per DoDI 8510.01 and enforce all applicable Air Force cybersecurity policies and countermeasures.
- Maintain required cybersecurity certifications and ensure users meet clearance, training, and access requirements.
- Manage user access documentation, account requests, ports/protocols, and access control lists.
- Ensure compliance with DoD security configuration guidelines (e.g., STIGs, SRGs) and oversee system configuration management activities.
- Identify, report, and coordinate remediation of security incidents, vulnerabilities, and risks.
- Support RMF Authorization & Accreditation (A&A) activities, ensuring high-quality documentation and adherence to DoD and Air Force requirements.
- Develop and support security-focused documentation including SSPs, PPPs, OPSEC Plans, SRAs, CONOPS, vulnerability analyses, and other system security engineering artifacts.
- Manage system security updates, patches, and configuration tracking in accordance with DoD requirements.
- Conduct risk assessments, security audits, reviews, and security evaluations for planned and operational systems.
- Recommend security policies, contingency plans, disaster recovery procedures, and risk-based strategies.
- Promote cybersecurity awareness and ensure security principles are embedded in organizational goals.
- Participate in system and network design to ensure correct implementation of security requirements.
- Obtain required cybersecurity exceptions, waivers, and deviations when necessary.
- Support evidence gathering and preservation for security investigations.
- Provide technical cybersecurity guidance across supported systems and evaluate system designs against requirements.
- Collaborate with Government and commercial stakeholders to achieve authorization from all Authorizing Officials under RMF.
