OverviewAs a part of the V2X Ground-Based Radar Development (GBRD) team, we are a part of an exciting opportunity to design and field a Common Radar Back End supporting UEWR, PARCS, COBRA DANE, and AN/FPS 85 radar sites.
We are seeking a Senior Cybersecurity Engineer to join our team and work alongside engineering, software, network, integration, test, and operations personnel on this modernization effort. This hands-on engineering position focuses on implementing, testing, documenting, and sustaining cybersecurity controls across development laboratories, integration environments, computing platforms, and operational radar sites. The position leads program cybersecurity and serves as the cybersecurity subject matter expert to provide technical leadership across requirements, architecture, integration, test, and fielding for modernization of strategic radar systems, across multiple integration laboratories serving operational radar sites.
Responsibilities- Lead a cybersecurity team responsible for the design and architecture of a cybersecurity system to support a new radar modernization effort.
- Design and implement cybersecurity controls and technical safeguards for Linux and Windows servers, workstations, virtualized environments, containers, networked devices, and supporting development infrastructure.
- Apply secure configuration baselines, Security Technical Implementation Guides, patching, account controls, endpoint protections, and vulnerability remediation under approved engineering and cybersecurity direction.
- Configure and maintain security logging, audit collection, telemetry, alerting, and data forwarding to approved monitoring and Defensive Cyber Operations tools.
- Perform vulnerability scanning, configuration compliance checks, remediation validation, and cybersecurity regression testing using approved tools and procedures.
- Support Risk Management Framework activities by collecting objective evidence, maintaining control implementation records, updating technical artifacts, and supporting assessment preparation.
- Support development and maintenance of System Security Plans, Plans of Action and Milestones, security assessment evidence, control implementation statements, and related technical documentation.
- Integrate security checks into software and platform delivery workflows, including source and dependency scanning, container image scanning, artifact validation, Software Bill of Materials generation, and release verification.
- Support secure deployment and sustainment of containerized applications and platform services in laboratory and operational environments.
- Assist with cybersecurity test planning and execution, including test procedures, test-fix-test cycles, vulnerability assessments, adversarial assessments, and verification of corrective actions.
- Troubleshoot cybersecurity findings with software, network, systems, hardware, test, and operations personnel and document technically supportable corrective actions.
- Support installation, integration, cutover, and site acceptance activities at laboratories and operational radar locations.
- Assist with cybersecurity test planning and execution, including test procedures, test-fix-test cycles, vulnerability assessments, adversarial assessments, and verification of corrective actions.
- Troubleshoot cybersecurity findings with software, network, systems, hardware, test, and operations personnel and document technically supportable corrective actions.
- Support installation, integration, cutover, and site acceptance activities at laboratories and operational radar locations.
- Maintain configuration-controlled cybersecurity procedures, scripts, checklists, test results, and implementation records.
- Support incident response activities by preserving logs, gathering technical evidence, performing initial analysis, and implementing approved containment or recovery actions.
- Support technical reviews and provide clear status, risk, issue, and remediation information to engineering and program stakeholders.
- Office based environment. Maybe some occasional travel, CONUS, OCONUS and Remote.
QualificationsEducation/Certification:- Bachelor's degree in a Science, Technology, Engineering, Mathematics, Cybersecurity, Computer Science, Information Technology, or related discipline and at least 8 years of relevant experience.
- An advanced degree in a related discipline and at least 5 years of relevant experience may be accepted.
- Additional directly relevant cybersecurity engineering experience may be considered in place of a degree or generalized experience.
- Ability to obtain a IAT level I certification such as Security+, CySA+, GCIH, Linux+ or equivalent within 6 months.
Required Skills:- Minimum 8 years of experience.
- Hands-on experience designing and implementing cybersecurity controls on enterprise, mission-critical, industrial, or Department of Defense information systems.
- Experience securing and administering Linux and Windows operating systems, including hardening, patching, account management, service configuration, logging, and vulnerability remediation.
- Experience applying Security Technical Implementation Guides, secure configuration standards, or comparable technical baselines.
- Experience using vulnerability assessment and compliance tools such as Tenable Nessus, Tenable Security Center, OpenSCAP, ACAS, SCAP tools, or equivalent.
- Experience configuring or supporting centralized logging, audit collection, security telemetry, and monitoring platforms such as Splunk, Elastic Stack, syslog, or equivalent.
- Working knowledge of Risk Management Framework processes and NIST SP 800-53 security controls.
- Ability to interpret cybersecurity requirements and convert them into testable technical configurations and implementation tasks.
- Strong troubleshooting, documentation, and communication skills.
- Experience with leading effectively with software, network, systems, hardware, integration, test, and operations teams.
- Proficiency with Microsoft Word, PowerPoint, Excel, and Outlook. Ability to work across engineering, test, operations, and logistics teams and translate requirements into implementable cyber solutions.
- Experience supporting cybersecurity activities in a systems integration laboratory, development laboratory, test environment, or operational site.
- Willingness to support occasional travel (CONUS, OCONUS, Remote)
- U.S. citizenship and an active DoD Secret clearance.
Desired Skills:- Experience supporting radar, missile defense, space, command-and-control, intelligence, weapon, or other mission-critical systems.
- Familiarity with NIST SP 800-171, DFARS 252.204-7012, Controlled Unclassified Information protection, and cybersecurity requirements for contractor environments.
- Experience with Red Hat Enterprise Linux, virtualization platforms, Kubernetes, OpenShift, Docker, or other container technologies.
- Experience with DoD cybersecurity tools, processes, and evidence packages used to support authorization and continuous monitoring.
- Experience supporting cybersecurity test and evaluation, vulnerability assessments, adversarial assessments, or incident response.
- Familiarity with Zero Trust principles, identity and access management, endpoint security, privileged access management, and data protection.
- Relevant certifications such as Security+, CySA+, CASP+, CISSP, GSEC, GCIH, Linux+, Red Hat, or equivalent.
- Experience producing technical evidence and documentation in support of security assessments, authorization activities, and corrective-action closure.
- Fluent with Microsoft Office - Word, PowerPoint, Excel, Visio, Outlook
- Ability to develop and maintain scripts or automation using Python, PowerShell, Bash, Ansible, or comparable tools.
- Familiarity with secure software development and DevSecOps controls, including code scanning, dependency scanning, container image scanning, artifact repositories, Software Bill of Materials, software licensing, and CI/CD security checks.
- Working knowledge of network security concepts, including segmentation, access control, secure protocols, firewall rules, authentication, encryption, and privileged access.
