Cybersecurity Engineer

$100,000 - $100,000/Yr

Astrion - Bedford, MA

Full-time - Mid Level

Bedford, MA

Crop Production

About the position

Astrion is seeking a dedicated Cybersecurity Engineer to join our team in Bedford, MA, supporting the Air Force Life Cycle Management Center/PEO Digital Directorate (AFLCMC/HB). This full-time position is located at Hanscom Air Force Base and plays a crucial role in managing and executing the modernization, development, testing, production, fielding, and sustainment of the PEO Digital portfolio, which encompasses over 130 programs for the United States Air Force (USAF) and its foreign allies. As a Cybersecurity Engineer, you will be responsible for ensuring the security and integrity of information systems, contributing to the overall mission of the Air Force Materiel Command (AFMC). Your expertise will be vital in developing and implementing security management plans, conducting risk assessments, and ensuring compliance with Department of Defense (DoD) policies and regulations. In this role, you will assist in the creation of various security-related documents, including System Security Management Plans and Program Protection Plans, while supporting the Authorization and Accreditation (A&A) efforts. You will also be tasked with managing user accounts, processing access control requirements, and overseeing the implementation of security updates. Your responsibilities will extend to conducting security evaluations, audits, and reviews, as well as promoting security awareness within the organization. You will collaborate with stakeholders to ensure that all systems meet the necessary security requirements and provide technical advice on systems security across all platforms. The ideal candidate will possess a strong understanding of cybersecurity principles, particularly within the DoD cloud infrastructure, and will have experience with Agile methodologies, including CI/CD, DevSecOps, and DevOps. You will be expected to communicate effectively on complex technical topics and provide leadership in analyzing and implementing cybersecurity requirements. This position offers a unique opportunity to contribute to the security of critical systems and support the mission of the USAF while working in a dynamic and innovative environment.

Responsibilities

• Assist with development of System Security Management Plans, Program Protection Plans, Security Risk Analyses, OPSEC Plans, and other system security engineering-related documents.
• Support the system/application Authorization and Accreditation (A&A) effort, assessing and guiding the quality and completeness of A&A activities.
• Update, monitor, and manage information in systems for the program office.
• Process and manage system user account requests and access control requirements.
• Manage the distribution, implementation, remediation, and tracking of system security updates and configurations as required by the DoD.
• Conduct risk and vulnerability assessments of planned and installed information systems.
• Promote awareness of security issues among management and ensure sound security principles are reflected in the organization's vision and goals.
• Conduct systems security evaluations, audits, and reviews.
• Recommend systems security contingency plans and disaster recovery procedures.
• Participate in network and systems design to ensure implementation of appropriate systems security policies.
• Facilitate the gathering, analysis, and preservation of evidence used in the prosecution of computer crimes.
• Develop risk-based strategies to address identified gaps in cybersecurity measures.
• Collaborate with stakeholders to ensure the system is approved by all Authorizing Officials via the RMF A&A process.
• Maintain databases that reflect receipt, storage, inventory, and disposition of classified information.

Requirements

• Must be a US citizen.
• Must have an active US security clearance.
• Bachelor's degree in a relevant field.
• 15 years or more of directly related experience, with at least 6 years in the DoD.
• Understanding of cybersecurity in DoD cloud infrastructure.
• Familiarity with Agile methods, including CI/CD, DevSecOps, and DevOps.
• Ability to effectively communicate in both written and verbal forms on highly technical topics.

Nice-to-haves

• Experience with security inspection and protection of classified information areas.
• Knowledge of security classification guides and compliance requirements.
• Experience in developing and implementing communications security programs.

Benefits

• Competitive salaries
• Continuing education assistance
• Professional development allotment
• Multiple healthcare benefits packages
• 401K with employer matching
• Paid time off (PTO) along with a federally recognized holiday schedule