Senior Cyber Security Engineer

SENIOR CYBERSECURITY ENGINEER

LOCATION: Hanscom AFB, Bedford, MA

Salary Range: $155,000 - $165,000

JOB STATUS: Full-time

CLEARANCE: Secret

CERTIFICATION: CISSP

Astrion has an exciting opportunity for a SeniorCybersecurity Engineer providing support to the Air Force Life Cycle Management Center-Ground Base Air Defense Sensor division (AFLCMC/ESG).

The ESG Division manages efforts focused on developing, acquiring, fielding and sustaining programs that support worldwide communications, Battle Management, Command & Control, Intelligence, Surveillance & Reconnaissance (C2ISR), Air/Ground Surveillance, Time Critical Targeting, Combat Identification, Radar Imagery, Integrated Air/Missile Defense, and Mobile/Fixed C2ISR Performance, Exploitation & Dissemination Facilities.

REQUIRED QUALIFICATIONS / SKILLS

• Citizenship: Must be a US citizen
• Clearance: Active Secret clearance
• Certification: CISSP Certification

PREFERRED QUALIFICATIONS / SKILLS

Preferred Qualifications

• Education: Bachelor’s degree in a professional engineering discipline from an ABET-accredited educational program and at least 10-15 years of experience in the respective technical/professional discipline, 10 of which must be in the DoD.

• Understanding of cybersecurity in DoD cloud infrastructure.
• Knowledge of Agile methodologies including CI/CD, DevSecOps, and DevOps.
• Expereinece with systems analysis and eMASS
• Strong ability to communicate technical topics effectively in both written and verbal forms.

Technical Skills

• STIG compliance
• Risk Management Framework (RMF) implementation and documentation.
• DoD cybersecurity policies and compliance.
• System Authorization and Accreditation (A&A) processes.
• DoD cloud infrastructure security.
• Agile development methods including CI/CD, DevSecOps, and DevOps.
• Security risk, vulnerability, and contingency planning.
• PKI management and access control.
• Classified material handling and accountability.

Interpersonal Skills

• Strong verbal and written communication skills for both technical and non-technical audiences.
• Ability to collaborate with government, contractor, and industry stakeholders.
• Effective problem-solving and analytical thinking.
• Ability to work independently and manage multiple priorities in a fast-paced environment.
• Adaptability to evolving program requirements and security challenges.

RESPONSIBILITIES

Duties include, but not limited to: 

• Assist with the installation, configuration, and maintenance of ACAS components, including Nessus scanners, SecurityCenter/Tenable.sc, and Nessus Network Monitor (NNM)/Tenable.asm.
• Assist in scheduling and executing vulnerability scans using Nessus scanners.
• Analyze scan results to identify vulnerabilities, and misconfigurations.
• Direct DISA STIG-based configuration hardening across multi-classification networks
• Assist with compliance assessments against DoW standards and internal security policies.
• Generate reports on vulnerability status, compliance posture, and remediation progress.
• Collaborate with system administrators  to facilitate vulnerability remediation efforts.
• Assist with system administration tasks for ACAS servers and databases.
• Manage cybersecurity incident reporting and conduct root‑cause analysis
• Develop corrective action plans and maintain POA&Ms
• Stay up to date on the latest vulnerability trends and security threats.