Senior Cybersecurity Engineer

Astrion - Bedford, MA

Full-time - Senior

Bedford, MA

Crop Production

About the position

As a Senior Cybersecurity Engineer at Astrion, you will play a pivotal role in supporting the Aerospace Management Systems Division (AFLCMC/HBA) within the USAF Digital Directorate, located at Hanscom AFB, MA. This position is integral to the Aloha/Air Route Surveillance Radar Version 4 Replacement - Hawaii (ARSR4R-HI) program, which focuses on replacing the current Hawaii Air Route Surveillance Radar Version 4 (ARSR-4). Your expertise will contribute to prototype development, testing, site preparation, and installation of the new radar system, which is essential for addressing Department of Defense (DoD) capability gaps and enhancing air traffic control and weather monitoring in Hawaii. This mission is a high priority for the DoD and supports NORAD/NORTHCOM and PACAF/INDOPACOM deterrence initiatives. In this full-time, salaried position, you will be recognized as an expert in your technical field, possessing advanced knowledge and experience. You will oversee the efforts of junior and mid-level personnel, ensuring that all system and application deliverables comply with DoD and Air Force cybersecurity policies. Your responsibilities will include developing System Security Management Plans, conducting security risk analyses, and managing system security updates. You will also be involved in the Authorization and Accreditation (A&A) process, ensuring that all activities meet the requirements set forth by governing DoD and Air Force policies, particularly the Risk Management Framework (RMF). Your role will require you to conduct risk and vulnerability assessments, recommend policies to enhance information systems reliability, and participate in network and systems design to implement appropriate security measures. You will collaborate with various stakeholders to ensure compliance with cybersecurity requirements and provide technical advice across all systems. This position demands a detail-oriented individual with excellent problem-solving skills, capable of thriving in a dynamic team environment while meeting end-user requirements.

Responsibilities

• Assist with development of System Security Management Plans, Program Protection Plans, Security Risk Analyses, OPSEC Plans, and other system security engineering-related documents.
• Support the system/application Authorization and Accreditation (A&A) effort, assessing and guiding the quality and completeness of A&A activities.
• Process and manage system port/protocol and access control list requirements.
• Manage the distribution, implementation, remediation, and tracking of system security updates and configurations as required by the DoD.
• Recommend policies and procedures to ensure information systems reliability and accessibility.
• Conduct risk and vulnerability assessments of planned and installed information systems.
• Conduct systems security evaluations, audits, and reviews.
• Recommend systems security contingency plans and disaster recovery procedures.
• Participate in network and systems design to ensure implementation of appropriate systems security policies.
• Provide leadership assistance in the analysis of the design, development, integration, implementation, and testing of cybersecurity requirements.
• Collaborate with stakeholders to ensure the system is approved by all Authorizing Officials via the RMF A&A process.
• Maintain databases that reflect receipt, storage, inventory, and disposition of classified information.
• Support Government program office in audits of Government classified holdings.
• Evaluate Contractor classified data submittals for compliance with the appropriate System Security Classification Guide (SSCG).
• Provide security inspection and protection to areas where classified information is being stored.
• Assist and advise FMS program office management and leadership in interfacing with FMS customers and USG organizations.
• Support execution of all aspects of acquisition program security throughout a program's lifecycle.

Requirements

• Must have an active US security clearance.
• Bachelor's Degree in a related field and 20 years of experience in the respective technical/professional discipline, with 10 years in the DoD, or 30+ years of directly related experience, with 12 years in the DoD.
• Understanding of cybersecurity in DoD cloud infrastructure.
• Understanding of Agile methods, including CI/CD, DevSecOps, and DevOps.
• Ability to effectively communicate in both written and verbal forms on highly technical topics.
• Detail-oriented with excellent problem-solving and analytical abilities.

Nice-to-haves

• Experience with software assurance and compliance with Public Law 111-383.
• Familiarity with MIL-STD 1785 and DoDI 5000.02.

Benefits

• Competitive salaries
• Continuing education assistance
• Professional development allotment
• Multiple healthcare benefits packages
• 401K with employer matching
• Paid time off (PTO) along with a federally recognized holiday schedule