Senior Cybersecurity Engineer
New
V
VetsEZFederal Healthcare IT
The candidate must reside within the continental US.Full-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- At least 10 years of relevant experience, including five years leading large security-engineering, ISSO, or ISSE teams.
- Required Skills
- AgileCybersecurity
Requirements
- Bachelor’s degree in Information Technology, Information Assurance, Cybersecurity, or a related field (or equivalent relevant experience).
- At least 10 years of relevant experience, including five years leading large security-engineering, ISSO, or ISSE teams.
- Current Certified Information Systems Security Professional (CISSP) certification.
- At least five years of security-engineering experience supporting Agile, Scrum or SAFe, DevSecOps, and cloud-based projects.
- Extensive knowledge of ATOs, System Security Plans, Zero Trust, continuous monitoring, security-control assessment, risk management, and federal security policy.
- Hands-on experience with application security testing, penetration testing, encryption, communication protocols, access control, PKI, incident response, and defense-in-depth architectures.
- Experience applying NIST Risk Management Framework, NIST SP 800-53, FISMA, FedRAMP, and federal Zero Trust requirements.
- Strong leadership, mentoring, customer-engagement, and analytical skills.
Responsibilities
- Define and lead security architecture, engineering standards, procedures, technologies, security requirements, and verification practices across complex enterprise environments.
- Provide technical leadership and oversight to ISSO and ISSE teams supporting security engineering, compliance, continuous monitoring, and remediation activities.
- Lead risk assessments, security-control assessments, security strategy, service design, vulnerability management, and broader cybersecurity program activities.
- Oversee ATO and System Security Plan activities while ensuring compliance with Zero Trust, continuous-monitoring, and federal security requirements.
- Design and guide static and dynamic application security testing, penetration testing, vulnerability analysis, and remediation in collaboration with development teams.
- Communicate security requirements, risks, vulnerabilities, compliance challenges, and actionable remediation recommendations to Government and cross-functional stakeholders.
View Full Description & ApplyYou'll be redirected to the employer's site
