Cybersecurity Engineer - Senior

Overview In this role you will provide cradle-to-grave cybersecurity engineering for mission-critical NAS/BNATCS systems, guiding security from requirements to operations. You will collaborate with cross-functional teams to ensure robust security throughout the system lifecycle and develop/maintain essential security artifacts. You’ll assess risks, lead vulnerability management, and communicate findings to leadership and customers. This is a on-site role in Herndon, VA with impact on national transportation safety and modernization. Compensation / Benefitsovertime eligibilitydiscretionary bonuson-site work in Herndon, VAPublic Trust clearance support ResponsibilitiesProvide cybersecurity engineering across the full system lifecycle (requirements, design, development, integration, test, deployment, operations, sustainment)Develop and trace cybersecurity requirements through system design and verificationCreate and maintain System Security Plans (SSPs), RMF artifacts, security controls, POA&Ms, and authorization evidenceApply NIST SP 800-53, RMF, and FAA cybersecurity requirementsConduct architecture/design reviews, vulnerability/risk assessments, security testing, and remediation verificationAssess cybersecurity impacts of releases, hardware/network changes, interfaces, patches, and configuration changesSupport vulnerability management, continuous monitoring, security baselines, change control, and POA&M closureCollaborate with systems, software, network, test, integration, and implementation teams to resolve cybersecurity risksCommunicate cybersecurity risks and recommended solutions to engineering teams, leadership, and customers Key requirementsU.S. CitizenshipAbility to obtain/maintain a Public Trust clearanceBachelor’s degree and 8 years experience or Master’s degree and 6 years experience or Associate’s degree and 10 years experience or HS diploma/equivalent and 12 years experienceCybersecurity engineering experience on complex government/aviation/mission-critical systemsExperience with RMF, SSP development, NIST SP 800-53, POA&Ms, security assessment, vulnerability management, and system authorizationExperience translating cybersecurity requirements into architecture, design, implementation, and verification activitiesExperience conducting cybersecurity architecture reviews, risk assessments, security testing, vulnerability analysis, and remediationExperience supporting networked, distributed, or high-availability systemsEffective communicator of complex cybersecurity risks to technical and leadership audiencesAbility to work with cross-functional teamsAnalytical thinking and problem solvingRMFNIST SP 800-53System Security Plans (SSPs)