Principal Cybersecurity Engineer

DCS Corporation - Bedford, MA

Full-time - Principal

Bedford, MA

Merchant Wholesalers, Durable Goods

About the position

DCS Corp has an exciting opportunity for a Principal Cybersecurity Engineer to support the Air Force Life Cycle Management Center/PEO Digital Directorate (AFLCMC/HB). The Air Force Program Execution Office for PEO Digital (AFPEO/HB) has the collective Air Force Materiel Command (AFMC) mission responsibility to manage and execute the modernization, development, testing, production, fielding, and sustainment of the PEO Digital portfolio, which includes over 130 programs for the United States Air Force (USAF) and foreign allies. AFLCMC/PEO Digital Directorate is headquartered at Hanscom Air Force Base, MA with geographically separated operating units CONUS and OCONUS. This is a full-time position located at Hanscom AFB, MA. The Principal Cybersecurity Engineer will be responsible for a variety of essential job functions that include assisting with the development of System Security Management Plans, Program Protection Plans, Security Risk Analyses, OPSEC Plans, Computer Certification and Accreditation, Security Vulnerability and Countermeasures Analyses, and Security Concepts of Operations. The role also involves supporting the system/application Authorization and Accreditation (A&A) effort, which includes assessing and guiding the quality and completeness of A&A activities mandated by governing DoD and Air Force policies, particularly the Risk Management Framework (RMF). In addition, the engineer will update, monitor, and manage information in systems for the program office, process and manage system user account requests, and handle system port/protocol and access control list requirements. The role requires managing the distribution, implementation, remediation, and tracking of system security updates and configurations as required by the DoD, as well as recommending policies and procedures to ensure information systems reliability and accessibility. Conducting risk and vulnerability assessments, promoting security awareness, and conducting systems security evaluations, audits, and reviews are also key responsibilities. The engineer will collaborate with stakeholders to ensure system approval via the RMF A&A process and provide technical advice in the area of systems security across all systems.

Responsibilities

• Assist with development of System Security Management Plans, Program Protection Plans, Security Risk Analyses, OPSEC Plans, Computer Certification and Accreditation, Security Vulnerability and Countermeasures Analyses, and Security Concepts of Operations.
• Support the system/application Authorization and Accreditation (A&A) effort, including assessing and guiding the quality and completeness of A&A activities.
• Update, monitor, and manage information in systems for the program office.
• Process and manage system user account requests and process tools.
• Process and manage system port/protocol and access control list requirements.
• Manage the distribution, implementation, remediation, and tracking of system security updates and configurations as required by the DoD.
• Recommend policies and procedures to ensure information systems reliability and accessibility.
• Conduct risk and vulnerability assessments of planned and installed information systems.
• Promote awareness of security issues among management and ensure sound security principles are reflected in the organization's vision and goals.
• Conduct systems security evaluations, audits, and reviews.
• Recommend systems security contingency plans and disaster recovery procedures.
• Participate in network and systems design to ensure implementation of appropriate systems security policies.
• Facilitate the gathering, analysis, and preservation of evidence used in the prosecution of computer-related incidents.
• Provide leadership assistance in the analysis of the design, development, integration, implementation, and testing of cybersecurity requirements.
• Develop risk-based strategies to address identified gaps.
• Review, analyze, and assess implementations of cybersecurity throughout the open systems architecture and associated services.
• Collaborate with stakeholders to ensure the system is approved by all Authorizing Officials via the RMF A&A process.
• Maintain databases that reflect receipt, storage, inventory, and disposition of classified information.
• Support Government program office in audits of Government classified holdings to ensure proper accountability.
• Provide security inspection and protection to areas where classified information is being stored, and develop and establish security procedures and policies IAW DOD, USAF, AFMC, and local directives.

Requirements

• U.S. Citizenship is required due to the sensitivity of customer-related requirements.
• A Bachelor's Degree plus 15 years of experience, 10 of which must be in the DoD.
• An adjudicated DoD Top Secret Security clearance on the First Day of employment.
• Understanding of cybersecurity in DoD cloud infrastructure.
• Understanding of Agile methods, including CI/CD, DevSecOps, and DevOps.
• Possess the ability to effectively communicate in both written and verbal forms on highly technical topics.