Senior Cybersecurity Engineer

Job Title: Senior Cybersecurity Engineer / Information Systems Security Engineer (ISSE)
Location: Offutt Air Force Base, Nebraska (Onsite)

Clearance: Active Top Secret clearance required; must be able to obtain TS/SCI
Citizenship: U.S. Citizenship required

Job Summary
GDIT is seeking a Senior Cybersecurity Engineer / Information Systems Security Engineer (ISSE) to support the U.S. Strategic Command (USSTRATCOM) mission at Offutt Air Force Base, Nebraska. The ideal candidate will have strong experience in cybersecurity engineering, information assurance, system security engineering, and secure architecture design.

In this role, you will integrate cybersecurity requirements throughout the system development life cycle, assess system architectures for security risks, develop security documentation, and recommend technical safeguards to protect mission-critical systems and networks in classified environments.

Key Responsibilities
Translate mission objectives, operational requirements, threats, and security policies into measurable system security requirements and engineering specifications.
Integrate cybersecurity requirements throughout the system life cycle, including design, development, integration, testing, deployment, and sustainment.
Participate in technical reviews, including requirements reviews, preliminary design reviews, test readiness reviews, and operational readiness reviews.
Evaluate system architectures for security, resilience, reliability, interoperability, scalability, and operational supportability.
Develop and maintain system security plans, security architecture diagrams, risk assessments, remediation plans, contingency plans, and security test documentation.
Design and recommend security controls for identity and access management, privileged access, encryption, key management, network segmentation, endpoint protection, logging, monitoring, backup, and recovery.
Conduct threat modeling, attack-surface analysis, security risk assessments, and vulnerability analysis.
Support secure network and system architecture design, including firewalls, cryptography, boundary protection, and secure communications.
Apply cybersecurity best practices across enterprise systems, applications, cloud platforms, and virtualized environments.
Support DevSecOps practices, security automation, and infrastructure-as-code initiatives.
Collaborate with systems engineers, cybersecurity teams, program managers, system owners, operations, testing, and sustainment teams.
Prepare technical documentation, architecture diagrams, briefings, and engineering recommendations for technical teams and leadership.
Required Qualifications
Bachelor's degree in a related field or equivalent practical experience.
Minimum of 5 years of experience in cybersecurity engineering, information assurance, system security engineering, or security architecture.
Active Top Secret security clearance, with the ability to obtain TS/SCI eligibility.
U.S. citizenship is mandatory.
Strong knowledge of system security, network security, secure architecture, encryption, cryptography, and identity management.
Experience developing or analyzing system security requirements and implementing security controls.
Knowledge of cybersecurity risk management and NIST security frameworks.
Familiarity with secure coding, scripting, or automation using Python, Java, or C++.
Strong analytical, problem-solving, communication, and technical documentation skills.
ITIL 4 Foundation certification or the ability to obtain it within nine months.
Preferred Qualifications
Experience with systems engineering and systems security engineering life-cycle processes.
Knowledge of Zero Trust architecture, defense-in-depth strategies, ICAM, network segmentation, boundary protection, and system hardening.
Familiarity with security frameworks and risk management processes, including NIST standards.
Experience with model-based systems engineering (MBSE), SysML, UML, architecture modeling, or digital engineering tools.
Experience with enterprise architecture frameworks or Department of War architecture approaches.
Knowledge of cyber forensics, intrusion detection, threat analysis, vulnerability management, and incident response.
Experience with security tools such as Splunk, Nessus, Wireshark, Nmap, and cloud security platforms.
Familiarity with AWS, Microsoft Azure, Google Cloud Platform, virtualization, DevSecOps, and Terraform.
Relevant certifications such as CISSP, CISSP-ISSEP, CISSP-ISSAP, GIAC, CEH, or INCOSE ASEP.