Senior Cybersecurity Engineer

Senior Cybersecurity Engineer
Location: Springfield, VA
Work Type: Onsite
Remote Work: NO

Job Description

Gridiron IT is seeking a Senior Cybersecurity Engineer will directly report to the Chief of Cyber Engineering. The candidate will leverage previous experience within multiple domains within a Defensive Cyber Operations (DCO) mission-set to achieve both strategic and tactical goals. The Senior Cybersecurity Engineer will oversee the day-to-day execution of all teams aligned under the Cyber Front Office. This includes identifying opportunities to mature processes and personnel with the intent to execute the mission effectively and efficiently. When appropriate, will provide guidance and recommendations to senior leadership on matters relating to the prioritization of resources.


Responsibilities:

• The Senior Cybersecurity Engineer will be required to effectively work with and communicate with varying levels of stakeholders to include TCS leadership, technical customers, non-technical customers, and all TCS staff of varying skillsets and experience.
• Responsible for designing, implementing, and maintaining an organization's cybersecurity infrastructure and systems.
• This role involves overseeing the security of networks, data, and systems, responding to security breaches, and ensuring compliance with relevant regulations and policies. It often includes strategic planning, risk assessment, collaboration with other teams and stakeholders, and conducting Analysis of Alternatives (AoA), design studies, and authoring white papers.
• Support the DCO mission as directed by the Chief of TCS Cyber and within the contract. With special emphasis on capturing metrics as it relates to resources and priorities.
• You will continue to mature processes and personnel through the direction of subordinate supervisory staff.
• Sufficient knowledge of complex enterprise cybersecurity systems and technologies with the ability to interpret network and web architecture documentation.
• Demonstrated experience providing briefings to an executive audience.
• Strategic Planning and Implementation
• Developing and implementing comprehensive cybersecurity strategies and plans that align with the organization's overall goals and objectives.
  Good understanding of CSSP model and how it pertains to the DoD. To include the mandated DoD policies and their respective audits as they relate to the mission ATO and accreditation.
• Excellent verbal and writing skills with the ability to write clear and concise assessment reports.
  Good understanding of adversarial tactics and techniques as it applies to defensive cyber operations.
  Supporting teams, developing cybersecurity strategies, and ensuring the organization's cyber capabilities are robust and effective.
• Work directly with the Chief of TCS Cyber to deliver the design, development, implementation, operations, and sustainment of cybersecurity services that enhance the cybersecurity posture of NGA Programs, Systems, and Enterprise.
• When required, will provide input to mitigate the absence of necessary capability gaps within the environment.
• You will assist with the monitoring of personnel performance and morale of staff across the Cybersecurity Division by providing recommended courses of action, to resolve issues, to TCS leadership.
• You will contribute to the identification and remediation of personnel staffing gaps.
• As needed, will provide guidance or direction to lower-level staff.
• Assists with the research and evaluation of new concepts, processes, and technology to improve performance and gain efficiencies within Cyber Engineering. With the intent to provide recommendations to the customer as it relates to Future Operations.
• Conduct Analysis of Alternatives (AoA) to evaluate different cybersecurity solutions and strategies.
• Perform design studies to assess the feasibility and effectiveness of proposed cybersecurity measures.
• Author white papers on emerging cybersecurity trends, technologies, and best practices.

Qualifications:
Required:

• A bachelor's degree, or higher, in Computer Science, Cyber Security Engineering or IT-related discipline. With an additional 8 years of experience in the cybersecurity field. Additional years of experience may be substituted in lieu of degree.
• Candidate must have TS/SCI with ability to obtain a Polygraph OR an active TS/SCI CI Poly
  Demonstrated leadership experience serving in positions such as functional manager or team lead for a minimum of 10 years.
• Certified DoD 8140.01 and 8570.01-M Information Assurance Technical Officer (IAT) Level II
• Certified DoD 8140.01 and 8570.01-M CSSP Infrastructure Support OR ability to obtain it with 90 days of start date
• Understanding of the Security Operations Capability Maturity Model(s) (SOC-CMM, C2M2, or equivalents) to secure information systems.
  Good understanding of ODNI ICS 500-27, NSM-8, and OMB M21-31
  Understanding of cybersecurity compliance policy, programs, processes, and metrics.
• Good understanding of the DoD Acquisitions process and how it relates to budget.
• Strong knowledge of network security, operating systems, security technologies (e.g., firewalls, intrusion detection systems, SIEM), and cybersecurity frameworks.

Desired:

• Demonstrated 8 or more years of experience supporting an IC or DoD agency in adopting and transitioning systems and services to cloud environments, including hybrid cloud environments.
• Proficient in vendor agnostic cloud security concepts
• Strong understanding with the Intelligence Lifecycle and how it applies to Cyber Threat Intelligence reporting.
• Strong understanding of Purple Team tactics and mitigating enterprise visibility or defensive gaps.
• Strong understanding of MITRE ATT&CK and the ability to map the corresponding TTP to the appropriate defensive capability as it relates to countermeasure development.

Clearance

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. Requires TS/SCI (able to obtain CI Polygraph after starting)

Compensation and Benefits

Salary Range: $65-85hr (Compensation is determined by various factors, including but not limited to location, work experience, skills, education, certifications, seniority, and business needs. This range may be modified in the future.)

Benefits: Gridiron offers a comprehensive benefits package including medical, dental, vision insurance, HSA, FSA, 401(k), disability & ADD insurance, life and pet insurance to eligible employees. Full-time and part-time employees working at least 30 hours per week on a regular basis are eligible to participate in Gridiron's benefits programs.

Gridiron IT Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status or disability status.

Gridiron IT is a Women Owned Small Business (WOSB) headquartered in the Washington, D.C. area that supports our clients' missions throughout the United States. Gridiron IT specializes in providing comprehensive IT services tailored to meet the needs of federal agencies. Our capabilities include IT Infrastructure & Cloud Services, Cyber Security, Software Integration & Development, Data Solution & AI, and Enterprise Applications. These capabilities are backed by Gridiron IT's experienced workforce and our commitment to ensuring we meet and exceed our clients' expectations.