JobCubby JobCubby
Sign up
Astrion

Senior Cyber Security Engineer

Astrion Bedford, Massachusetts, United States

Defense and Space Manufacturing · 5,001-10,000 employees

2 d ago
security Principal (10+ yrs) Full-time United States
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

The Senior Cybersecurity Engineer will assist with the installation, configuration, and maintenance of ACAS components and perform vulnerability scans. They are also responsible for hardening networks based on DISA STIGs, managing incident reporting, and maintaining compliance documentation.

What they look for

Cybersecurity CISSP Risk Management Framework STIG Compliance ACAS Tenable.sc Vulnerability Scanning DoD Cloud Infrastructure DevSecOps Agile Methodologies System Authorization and Accreditation PKI Management Access Control Incident Reporting Root-cause Analysis POA&M

Requirements

Candidates must be US citizens with an active Secret clearance and a CISSP certification. A bachelor's degree in an engineering discipline and 10-15 years of relevant experience, including 10 years in the DoD, are preferred.

Full description

Overview

SENIOR CYBERSECURITY ENGINEER

LOCATION: Hanscom AFB, Bedford, MA

Salary Range: $155,000 - $165,000

JOB STATUS: Full-time

CLEARANCE: Secret

CERTIFICATION: CISSP

Astrion has an exciting opportunity for a Senior Cybersecurity Engineer providing support to the Air Force Life Cycle Management Center-Ground Base Air Defense Sensor division (AFLCMC/ESG).

The ESG Division manages efforts focused on developing, acquiring, fielding and sustaining programs that support worldwide communications, Battle Management, Command & Control, Intelligence, Surveillance & Reconnaissance (C2ISR), Air/Ground Surveillance, Time Critical Targeting, Combat Identification, Radar Imagery, Integrated Air/Missile Defense, and Mobile/Fixed C2ISR Performance, Exploitation & Dissemination Facilities.

REQUIRED QUALIFICATIONS / SKILLS

  • Citizenship: Must be a US citizen
  • Clearance: Active Secret clearance
  • Certification: CISSP Certification

PREFERRED QUALIFICATIONS / SKILLS

Preferred Qualifications

  • Education: Bachelor’s degree in a professional engineering discipline from an ABET-accredited educational program and at least 10-15 years of experience in the respective technical/professional discipline, 10 of which must be in the DoD.
  • Understanding of cybersecurity in DoD cloud infrastructure.
  • Knowledge of Agile methodologies including CI/CD, DevSecOps, and DevOps.
  • Expereinece with systems analysis and eMASS
  • Strong ability to communicate technical topics effectively in both written and verbal forms.

Technical Skills

  • STIG compliance
  • Risk Management Framework (RMF) implementation and documentation.
  • DoD cybersecurity policies and compliance.
  • System Authorization and Accreditation (A&A) processes.
  • DoD cloud infrastructure security.
  • Agile development methods including CI/CD, DevSecOps, and DevOps.
  • Security risk, vulnerability, and contingency planning.
  • PKI management and access control.
  • Classified material handling and accountability.

Interpersonal Skills

  • Strong verbal and written communication skills for both technical and non-technical audiences.
  • Ability to collaborate with government, contractor, and industry stakeholders.
  • Effective problem-solving and analytical thinking.
  • Ability to work independently and manage multiple priorities in a fast-paced environment.
  • Adaptability to evolving program requirements and security challenges.

RESPONSIBILITIES

Duties include, but not limited to:

  • Assist with the installation, configuration, and maintenance of ACAS components, including Nessus scanners, SecurityCenter/Tenable.sc, and Nessus Network Monitor (NNM)/Tenable.asm.
  • Assist in scheduling and executing vulnerability scans using Nessus scanners.
  • Analyze scan results to identify vulnerabilities, and misconfigurations.
  • Direct DISA STIG-based configuration hardening across multi-classification networks
  • Assist with compliance assessments against DoW standards and internal security policies.
  • Generate reports on vulnerability status, compliance posture, and remediation progress.
  • Collaborate with system administrators to facilitate vulnerability remediation efforts.
  • Assist with system administration tasks for ACAS servers and databases.
  • Manage cybersecurity incident reporting and conduct root‑cause analysis
  • Develop corrective action plans and maintain POA&Ms
  • Stay up to date on the latest vulnerability trends and security threats.

Similar roles