Cybersecurity Engineer, Principal (ISSE)

Accountabilities

• • Provide cybersecurity and information system security engineering support in accordance with applicable Department of War and Air Force cybersecurity requirements.
  • Assess, monitor, and manage cybersecurity risks while ensuring adherence to the Risk Management Framework (RMF), Cybersecurity Framework (CSF), NIST guidance, and Information Security Continuous Monitoring (ISCM) strategies.
  • Implement security controls using secure engineering principles, secure coding practices, and established cybersecurity standards.
  • Coordinate cybersecurity activities with Information System Security Managers, Information System Security Officers, Information Security Officers, system architects, common control providers, and other stakeholders.
  • Maintain required cybersecurity certifications and ensure compliance with applicable Air Force policies and technical guidance.
  • Support Authority to Operate (ATO), Authority to Connect (ATC), and Plan of Action and Milestones (POA&M) activities, including tracking and resolving corrective actions.
  • Develop and maintain ISCM strategies while continuously monitoring systems and environments for relevant changes and security events.
  • Assess configuration and system changes to determine their potential cybersecurity impact.
  • Evaluate the effectiveness and performance of security controls and identify areas requiring remediation or improvement.
  • Identify and report security-relevant events, system changes, and other conditions that could affect authorization or security posture.
  • Ensure security documentation, evidence, and authorization artifacts remain accurate, complete, and current.
  • Support security and privacy training and awareness activities, including ensuring appropriate training and certifications for Information System Security Officers and privileged users.
  • Validate and analyze security testing results using automated tools such as Fortify, Checkmarx, SonarQube, and AppScan.
  • Support cybersecurity software development activities and integrate security practices throughout the development lifecycle.
  • Ensure information technology is properly acquired, documented, operated, maintained, and ultimately disposed of in accordance with applicable government requirements.

  Requirements

  • U.S. citizenship is required.
  • Bachelor’s degree in a related field with at least 10 years of experience in the relevant technical or professional discipline.
  • Active T3/Secret security clearance that can be maintained throughout employment.
  • Demonstrated experience providing cybersecurity guidance in areas including access control, configuration management, system and communications protection, contingency planning, incident handling, and system and information integrity.
  • Experience performing cybersecurity responsibilities in accordance with DoWI 8500.01, AFI 17-130, and AFI 17-1301.
  • Experience supporting security and privacy training, awareness programs, and cybersecurity-related software development activities.
  • Experience validating, evaluating, and analyzing automated security testing results using tools such as Fortify, Checkmarx, SonarQube, or AppScan.
  • Experience working with Department of War tracking and security systems such as Jira, HP ALM, and eMASS.
  • Experience conducting Information Security Continuous Monitoring (ISCM) activities.
  • Ability to assess security controls, analyze system changes, identify risks, and support RMF and authorization processes.
  • Must meet DCWF Information Systems Security Developer (631) principal-level certification requirements, including FITSI FITSP-D as required, with GIAC GCSA and/or (ISC)² CISSP-ISSEP credentials as applicable.
  • Strong understanding of cybersecurity engineering, secure development, risk management, security controls, and compliance frameworks.
  • Ability to collaborate effectively with technical and security stakeholders across multiple functions.
  • Strong documentation, analytical, communication, and problem-solving skills.
  • Ability to work independently while managing complex cybersecurity activities and competing priorities.
  • Certified Scrum Master or other Agile certifications are preferred.
  • Working knowledge of Agile development methodologies is preferred.
  • Experience with Checkmarx, SonarQube, Mavin, Fortify, Jira, Confluence, and Bitbucket is a plus.

  Benefits

  • Full-time position supporting a mission-critical government technology program.
  • Remote work opportunity based in the United States.
  • Primary work location associated with Kettering, Ohio.
  • Limited travel requirement of approximately 0–10%.
  • Opportunity to work on cybersecurity engineering, secure development, continuous monitoring, and authorization activities supporting a major federal program.
  • Exposure to advanced cybersecurity frameworks, automated security testing tools, Agile development environments, and government security processes.
  • Opportunity to collaborate with experienced cybersecurity, engineering, architecture, and program stakeholders.
  • High-impact work focused on protecting critical systems and maintaining strong cybersecurity and compliance standards.