cybersecurity engineer

Alterman Management Group

<div><p><b>Overview:</b></p>
<p>
The Senior Cybersecurity Engineer designs, implements, and maintains security controls to protect Alterman&rsquo;s information assets. This role leads security engineering initiatives, supports advanced threat detection and response, mentors security staff, and serves as an escalation point for complex security issues. The Senior Cybersecurity Engineer partners with technology teams to embed security into systems and processes. Documentation is central to this role; the Senior Cybersecurity Engineer is expected to thoroughly document all security processes, procedures, configurations, decisions, and operational activities.</p>
<p><b>
Essential Functions:</b></p>
<p><b>
1. Security Engineering &amp; Architecture: 25%</b></p>
<ul>
<li>Designs, implements, and integrates security solutions, including SIEM, EDR, DLP, and network security technologies, for systems, applications, and infrastructure.</li>
<li>Develops, maintains, and enforces security architecture documentation, standards, and automation for security operations and incident response.</li>
<li>Evaluates and recommends security tools and technologies.</li>
<li>Conducts security assessments and penetration testing.</li>
</ul>
<p><b>2. Threat Detection &amp; Response: 20%</b></p>
<ul>
<li>Leads advanced threat hunting, detection, and response activities, including the development and tuning of detection rules, alerts, and correlation logic.</li>
<li>Performs root cause analysis and leads incident response activities for complex security events.</li>
<li>Develops and maintains incident response playbooks and procedures.</li>
<li>Coordinates with external parties, including vendors and law enforcement, during incidents.</li>
</ul>
<p><b>3. Access Controls &amp; Identity Management: 15%</b></p>
<ul>
<li>Designs, implements, and manages enterprise IAM solutions, including directory services, SSO, MFA, PAM, and hybrid identity environments.</li>
<li>Develops, enforces, and governs access controls, including conditional access policies, RBAC models, and access certifications.</li>
<li>Manages Active Directory, Entra ID, and hybrid identity configurations.</li>
<li>Administers single sign-on (SSO) and federation services.</li>
<li>Manages privileged access management (PAM) solutions and policies.</li>
<li>Partners with HR and business units on joiner, mover, and leaver processes.</li>
<li>Troubleshoots complex authentication and authorization issues.</li>
</ul>
<p><b>4. Compliance &amp; Documentation: 15%</b></p>
<ul>
<li>Supports compliance with regulatory requirements and industry standards (CMMC, SOC 2, NIST) by maintaining documentation, evidence, and audit artifacts.</li>
<li>Coordinates audit activities, including evidence collection and interviews.</li>
<li>Supports risk management activities, including enterprise risk assessments, vendor risk reviews, and maintenance of the risk register.</li>
<li>Develops and maintains security policies, standards, and procedures.</li>
<li>Monitors policy compliance and manages exceptions.</li>
<li>Supports security awareness program activities and phishing simulations.</li>
<li>Tracks and reports on compliance and risk metrics.</li>
</ul>
<p><b>5.Vulnerability Management: 10%</b></p>
<ul>
<li>Leads vulnerability management activities, including scanning, assessment, prioritization, remediation tracking, and reporting of vulnerability metrics and trends.</li>
<li>Partners with IT teams to ensure timely patching and remediation.</li>
</ul>
<p><b>6. Mentorship &amp; Collaboration: 10%</b></p>
<ul>
<li>Provides mentorship, technical guidance, and training to Cybersecurity Engineers and other IT staff.</li>
<li>Partners with Infrastructure, Applications, and Service Desk teams on security matters.</li>
<li>Serves as an escalation point for complex security issues.</li>
</ul>
<p><b>7. Performs other duties as assigned. 5%</b></p>
<p><b>
Education and Experience:</b></p>
<ul>
<li>Minimum of 5-7 years of experience in cybersecurity, security engineering, identity management, or related IT roles required; OR minimum of 7 years of progressive IT experience with security focus.</li>
<li>Bachelor's degree in Computer Science, Information Security, Information Technology, or related field preferred; equivalent combination of education and experience will be considered.</li>
<li>Security-related certifications required (e.g., CompTIA Security+, CySA+, CEH, or GIAC certifications); senior-level certifications such as CISSP or CISM preferred.</li>
<li>Additional certifications preferred (e.g., Microsoft Identity SC-900/SC-300, CRISC, CISA, CGRC).</li>
<li>Familiarity with compliance frameworks required (NIST, ISO 27001, SOC 2, CMMC).</li>
</ul>
<p><b>Skills/Abilities:</b></p>
<ul>
<li>Expert communication skills with the ability to explain complex security concepts to technical and non-technical audiences and translate technical risk into business-impact language.</li>
<li>Strong analytical and problem-solving skills.</li>
<li>Demonstrated ability to mentor and coach technical staff.</li>
<li>Able to perform effectively under pressure during active security incidents and participate in on-call and after-hours response activities as required.</li>
<li>Strong ability to develop and maintain security automation and scripting (e.g., Python, PowerShell, Bash).</li>
<li>Deep understanding of attack techniques, threat actors, defensive strategies, and modern threat detection methods.</li>
<li>Deep understanding of authentication and identity protocols (e.g., SAML, OAuth, OIDC, Kerberos).</li>
<li>Strong technical writing skills for developing policies, standards, procedures, and compliance documentation.</li>
<li>Able to plan, coordinate, and execute security initiatives using effective organizational and project management skills.</li>
<li>Strong ability to work with enterprise security technologies (e.g., SIEM, EDR, network and cloud security controls, vulnerability management tools, penetration testing platforms, threat intelligence solutions, security orchestration and automation).</li>
<li>Strong ability to work with identity and access management technologies (e.g., Active Directory, Entra ID, SSO, MFA, PAM, identity governance platforms, zero trust architectures).</li>
<li>Familiarity with governance, risk, and compliance platforms and tools (e.g., GRC systems, security awareness platforms, documentation and workflow tools).</li>
</ul>
<p><b>Work Environment:</b></p>
<ul>
<li>Office environment.</li>
<li>May require occasional evening or weekend work for critical updates or incident response.</li>
</ul>
<p><b>Physical Demands:</b></p>
<ul>
<li>Prolonged periods of sitting at a desk and working on a computer.</li>
<li>Must be able to lift up to 15 pounds at times.</li>
<li>Manual dexterity associated with computer data entry required.</li></ul></div>

Sr. Cybersecurity Engineer

SciTec

<div><p>SciTec, a wholly owned subsidiary of Firefly Aerospace, is a dynamic non-traditional defense contractor that delivers advanced technologies in support of U.S. National Security and Defense. For the past forty-five plus years, we have supported Department of Defense customers by developing innovative remote sensing algorithms, tools, and techniques to deliver world-class data exploitation capabilities supporting missile defense; intelligence, surveillance, &amp; reconnaissance; space domain awareness; and aircraft survivability missions.</p><p><b>
Important Notice: </b>SciTec exclusively works on U.S. government contracts that require U.S. citizenship for all employees. Applicants that do not meet this requirement will not be considered.</p><p>
SciTec has immediate opportunities for an experienced Senior Cybersecurity Engineer to work in either our Boulder, CO or Princeton, NJ office.
</p><p><b>Responsibilities:
</b></p><ul><li>Serve as the CrowdStrike technical lead, leading implementation and integration across virtual, physical, and cloud environments. (AWS/Azure)</li><li>
Harden and secure mission infrastructure assets, including servers, network devices, storage systems, and supporting platforms</li><li>
Provide expertise to the vulnerability management process, including but not limited to risk prioritization based on environment and remediation actions. (Tools include Tenable, NinjaOne)</li><li>
Collaborate with Infrastructure teams to provide cybersecurity input to system architecture, enclave segmentation, and infrastructure design decisions</li><li>
Serves as technical lead for CMMC/NIST 800-171 requirements</li><li>
Create and maintain SIEM queries in response to emerging threats around environment.</li><li>
Develop and maintain CrowdStrike NG-SIEM log parsing</li><li>
Ensure logging, monitoring, and access controls meet security and compliance requirements</li><li>
Identify and mitigate operational cybersecurity risks across the asset lifecycle</li><li>
Support incident response preparation and forensic readiness efforts</li><li>
Communicate cybersecurity posture, risks, and remediation plans to technical and program leadership</li><li>
Other duties as assigned</li></ul><p></p><b><br>
Requirements</b><br>
<ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Engineering, or related field</li><li>
CompTIA Cybersecurity Analyst (CySa+) or similar certification</li><li>
6+ years of professional experience in cybersecurity engineering</li><li>
2+ years of experience using CrowdStrike EDR and NG-SIEM</li><li>
Professional technical experience with NIST 800-171 / CMMC controls</li><li>
Experience conducting vulnerability scanning and remediation</li><li>
Strong understanding of Linux systems security</li><li>
Strong understanding of Windows systems security</li><li>
Strong understanding of Active Directory and IAM Security Best Practices</li><li>
Experience with scripting languages, such as Python, PowerShell or Bash</li><li>
Familiarity with network security concepts and segmentation</li><li>
Ability to obtain and maintain a DoD security clearance</li><li>
Strong documentation and communication skills</li><li>
Proven oral and written communication skills</li><li>
Strong attention to detail</li></ul><p>
Candidates who have any of the following skills will be preferred:</p><ul><li>
Professional experience in Cloud Security (AWS / Azure)</li><li>
Experience integrating security into DevSecOps pipelines</li><li>
GIAC Certified Incident Handler (GCIH) certification</li><li>
CrowdStrike Certified Falcon Administrator (CCFA) certification</li></ul><br>
<b>
Benefits</b><p><br>
SciTec offers a highly competitive salary and benefits package, including:</p><ul><li>
4% Safe Harbor 401(k) match
</li><li>100% company paid HSA Medical insurance, with a choice of 2 buy-up options</li><li>
80% company paid Dental insurance</li><li>
100% company paid Vision insurance</li><li>
100% company paid Life insurance</li><li>
100% company paid Long-term Disability insurance</li><li>
100% company paid Hospital Indemnity insurance</li><li>
Voluntary Accident and Critical Illness insurance</li><li>
Short-term Disability insurance</li><li>
Annual Profit-Sharing Plan</li><li>
Discretionary Performance Bonus</li><li>
Paid Parental Leave</li><li>
Generous Paid Time Off, including Holiday, Vacation, and Sick Pay</li><li>
Flexible Work Hours</li></ul><p></p><p>
The pay range for this position is $121,000 - $147,000 / year. SciTec considers several factors when extending an offer of employment, including but not limited to the role and associated responsibilities, a candidate's work experience, education/training, and key skills. This is not a guarantee of compensation.
</p><p>SciTec is proud to be an Equal Opportunity employer. VET/Disabled.</p></div>

Senior Cybersecurity Engineer

Odyssey Consulting

<div><h2 class="jobSectionHeader"><b>Position Summary
</b></h2><div><div><div><div>Odyssey Systems has an exciting opportunity for a <b>Cybersecurity Engineer</b> to support the Air Force Life Cycle Management Center/PEO Digital Directorate (AFLCMC/HB).</div><div>
The Air Force Program Execution Office for PEO Digital (AFPEO/HB) has the collective Air Force Materiel Command (AFMC) mission responsibility to manage and execute the modernization, development, testing, production, fielding, and sustainment of the PEO Digital portfolio, which includes over 130 programs for the United States Air Force (USAF) and foreign allies. AFLCMC/PEO Digital Directorate is headquartered at Hanscom Air Force Base, MA with geographically separated operating units CONUS and OCONUS.</div><div></div><div><br>
This is a full-time position located at Hanscom Air Force Base, MA.</div><div></div><div><br>
***Contingent upon contract award***</div>
</div></div></div><h2 class="jobSectionHeader"><b>Responsibilities
</b></h2><div><div><div><div><b>Duties includ</b><b>e, but not limited to:</b></div><div><div><div><div><div><div><div><div><ul><li><div>
Assist in developing and maintaining program security documentation including System Security Management Plans (SSMPs), Program Protection Plans (PPPs), OPSEC Plans, Security Concepts of Operations (CONOPS), Security Risk Analyses, and Security Classification Guides (SCGs) in accordance with applicable DoD policies and acquisition guidance.</div></li><li><div>
Maintain program security information within designated systems and databases and track implementation of security-related updates and configuration changes.</div></li><li><div>
Process and manage system user accounts, access control lists, port/protocol requests, and Public Key Infrastructure (PKI) access requirements, including provisioning and troubleshooting user access for NIPRNet and SIPRNet environments.</div></li><li><div>
Support IT equipment inventory management and serve as the equipment custodian responsible for asset accountability, inventory tracking, and lifecycle management of program equipment.</div></li><li><div>
Provide conference room network and audiovisual system setup, configuration, and troubleshooting support for meetings and program events.</div></li><li><div>
Troubleshoot network connectivity issues for program systems and user devices and assist users with system access and connectivity problems.</div></li><li><div>
Maintain records for the receipt, storage, inventory, transmission, and disposition of classified information, including tracking classified visits and personnel clearance levels in accordance with security policies.</div></li><li><div>
Support implementation and maintenance of Communications Security (COMSEC) procedures and assist with security education and awareness activities for program personnel.</div></li></ul></div></div></div></div></div></div></div></div>
</div></div></div><h2 class="jobSectionHeader"><b>Qualifications
</b></h2><div><div><div><div><b>Citizenship: Must be a US citizen</b></div><div><b>
Clearance</b><b>: Must have an Active Secret Clearance</b></div><div></div><div><b><br>
Minimum Required Qualifications:</b></div><div><b>
Education: </b>Bachelor's degree from an accredited educational program and at least 7 years of experience in the respective professional discipline being performed, 5 of which must be in the DoD</div><div></div><ul><li><div><br>
Serve as Equipment Custodian, responsible for issuing, tracking, and maintaining accountability of organizational IT equipment.</div></li><li><div>
Perform conference room network setup and troubleshooting, including connectivity, audiovisual systems, and user support for meetings.</div></li><li><div>
Support NIPR/SIPR account setup and troubleshooting, including account provisioning, access requests, and user issue resolution.</div></li><li><div>
Maintain equipment inventory and network connectivity, ensuring accurate asset tracking and operational network access for assigned devices.</div></li></ul><div></div><div><b><i><br>
Preferred Qualifications</i></b></div><div><b>
Education: </b>Master's degree in a professional engineering discipline from an ABET-accredited educational program and at least 5 years of experience in the respective technical/professional discipline being performed, 3 of which must be in the DoD</div><div></div><div><b><i><br>
Additional Information</i></b></div><div><b>
Location: </b>Hanscom Air Force Base, MA</div><div><b>
Onsite</b></div><div></div><div><br>
#LI-KM1</div>
</div></div></div><h2 class="jobSectionHeader"><b>Company Overview
</b></h2><div><div><div><div><b>Odyssey Systems </b>is a world-class technical, engineering, and integration company serving the warfighting ecosystem with airborne integration, ISR, C2, and warfighter readiness capabilities. Odyssey meets the military&rsquo;s operational needs by integrating layered defense systems from equipment, technology, and services to data, information, and business operations. We streamline defense acquisition and sustainment, engineering the technical battlefield with domain-specific proficiency to ensure lethality. Odyssey is dedicated to excellent contract execution, peak organizational performance, and fostering a workplace built on employee care.</div><div></div><div><br>
Odyssey is proud to live out our core values of commitment, ambition, and respect in our work and communities through OdysseyCares, a philanthropic group focused on giving back through direct donations, an employer match program, and volunteering events.</div><div></div><div><b><i><br>
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities</i></b></div>
</div></div></div><h2 class="jobSectionHeader"><b>Please Note:
</b></h2><div><div><div><p>Final compensation for this position will be determined by various factors such as the Federal Government contract labor categories and contract wage rates, relevant work experience, specific skills and competencies, geographic location, education, and certifications.</p><p></p><p><br>
This position is filled through continuous recruitment and will remain open until a sufficient pool of applications has been received.<br>
<br>
Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, Tricare supplement, short-term disability, long-term disability, 401(k) match, flexible spending accounts, health savings accounts, employee assistance program, learning and development benefit, paid time off, and holidays.<br>
<br>
Odyssey Benefits</p></div></div></div></div>

Cybersecurity Engineer

Odyssey Systems Consulting Group

<div>Position Summary:
<div>
Odyssey Systems is recruiting to fill a <b>Cybersecurity Engineer, Journeyman</b> role supporting the ISR/SOF Directorate (AFLCMC/WI), who is responsible for equipping our warfighters to win the fight. The Directorate executes a $22 billion acquisition portfolio developing, producing, testing, modifying, fielding, and supporting Air Force ISR and SOF platforms, and related sub-systems.</div><div><br>
</div><div><b>Program description:
</b></div><div>The ISR/SOF Directorate has the collective Air Force Materiel Command (AFMC) mission responsibility for equipping ISR &amp; SOF warfighters to dominate the battlespace. Applicants will benefit from competitive salaries, career growth, and a unique ability to positively impact national security on a global scale!</div><br>
<div></div>
Responsibilities:
<div>
Duties include, but not limited to:</div><ul><li>
Provide expert weapons system cybersecurity guidance and recommendations to program engineers, program managers, acquisition security program executive officer, Milestone Decision Authority (MDA), and AO.</li><li>
Translate and provide comprehensive NIST 800-53 requirements to ensure SSE and procurement solutions are incorporated into an integrated program protection scheme based upon known or anticipated risks.</li><li>
Knowledge of systems engineering principles, network architecture analysis, verification and validation of requirements, and understanding the risk management process and understanding of the operational context of weapon systems employment is critical.</li><li>
Provide subject matter expertise to support the AFPEO&rsquo;s intent to execute RMF to support assessment &amp; authorization of assigned systems including generating required artifacts such as Interim Authority to Test (IATT), Authority to Connect (ATC), and Authority to Operate (ATO) packages as well as associated reports and presentations.</li><li>
Execute risk reduction-based policies and procedures and develop system specific comprehensive cybersecurity processes to include implementation of continuous monitoring.</li><li>
Document system architectures, utilizing original equipment manufacturer documentation and system interface specifications, to support the cyber analysis, identification, selection, and tailoring of security and privacy controls necessary to protect the system.</li><li>
Provide expert level evaluation of designs and proposed implementation solutions to defend weapon systems and critical networks against malicious and non-malicious exploitation throughout the full acquisition lifecycle of portfolio programs.</li><li>
Evaluate threat data and develop residual risk recommendations and mitigations to senior DoD and AF leadership based on identification and analysis of weapons vulnerabilities.</li><li>
The Contractor will review and analyze interoperability requirements and will review, develop and evaluate resultant specifications and internal and external Interface Control Documents (ICDs).</li><li>
Review and propose technical recommendations at both the strategic and operational levels regarding critical technologies requiring protection, Program Protection Plans (PPP), and anti-tamper (AT) plans, cyber findings, vulnerabilities, and risks.</li><li>
Conduct technical evaluations on vendors' proposals to ensure that cybersecurity requirements are properly addressed.</li><li>
Assist and advise various working groups, planning teams and IPTs by preparing and reviewing agendas, coordinating topics and speakers, and researching, tracking and closing action items.</li><li>
Support multiple systems security working groups to develop a secure, resilient aircraft based on SSE principles.</li><li>
Provide expert identification, documentation, and assessment of threats, cyber findings, vulnerabilities, attack scenarios, impacts if exploited, and likely timelines for exploitation.</li><li>
Provide stakeholders with on-time deliverables, RMF artifacts, cyber impact assessments, and approaches to meet growing ISR &amp; SOF requirements.</li><li>
Deliver solutions which are ready for the AO approval under significantly reduced timelines required by special operations and quick reaction capability programs.</li><li>
Ensure that contractual documentation, such as statements of work, CDRLs, and SRDs, incorporate cybersecurity requirements that support the development of the assessment and authorization process.</li><li>
Support up to 33% of contract time on travel to support remote site, site visits, site audits, design reviews and engineering implementation reviews of network architectures.</li></ul><br>
<div></div>
Qualifications:
<div><b><i>
Minimum Required Qualifications:</i></b></div><div></div><div><b><br>
Citizenship: </b>US Citizen</div><div><b>
Clearance: </b>Top Secret/SCI</div><div><b>
Certifications:</b> IAT level 2</div><div><b>
Minimum Qualifications:</b></div><ul><li>&bull; Bachelor&rsquo;s degree or master&rsquo;s degree in a related field and at least three years of</li></ul><div>
experience in the respective technical / professional discipline being performed, three of</div><div>
which must be in the DoD.</div><ul><li> OR, seven years of directly related experience with proper certifications as described in</li></ul><div>
the PWS labor category performance requirements, five of which must be in the DoD.</div><div></div><div><b><br>
Remote, Onsite, or Hybrid: </b>Onsite at WPAFB, OH.</div><div></div><div><br>
#LI-JC1</div>
Company Overview:
<div><b>
Odyssey Systems </b>is a world-class technical, engineering, and integration company serving the warfighting ecosystem with airborne integration, ISR, C2, and warfighter readiness capabilities. Odyssey meets the military&rsquo;s operational needs by integrating layered defense systems from equipment, technology, and services to data, information, and business operations. We streamline defense acquisition and sustainment, engineering the technical battlefield with domain-specific proficiency to ensure lethality. Odyssey is dedicated to excellent contract execution, peak organizational performance, and fostering a workplace built on employee care.</div><div></div><div><br>
Odyssey is proud to live out our core values of commitment, ambition, and respect in our work and communities through OdysseyCares, a philanthropic group focused on giving back through direct donations, an employer match program, and volunteering events.</div><div></div><div><b><br>
Please note</b>: Final compensation for this position will be determined by various factors such as the Federal Government contract labor categories and contract wage rates, relevant work experience, specific skills and competencies, geographic location, education, and certifications.</div><div></div><div><b><i><br>
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities</i></b></div></div>

Cybersecurity Engineer, Journeyman

<div><h2 class="jobSectionHeader"><b>Position Summary
</b></h2><div><div><div><div>Odyssey Systems is recruiting to fill a <b>Cybersecurity Engineer, Journeyman</b> role supporting the ISR/SOF Directorate (AFLCMC/WI), who is responsible for equipping our warfighters to win the fight. The Directorate executes a $22 billion acquisition portfolio developing, producing, testing, modifying, fielding, and supporting Air Force ISR and SOF platforms, and related sub-systems.</div><div><br>
</div><div><b>Program description:
</b></div><div>The ISR/SOF Directorate has the collective Air Force Materiel Command (AFMC) mission responsibility for equipping ISR &amp; SOF warfighters to dominate the battlespace. Applicants will benefit from competitive salaries, career growth, and a unique ability to positively impact national security on a global scale!</div><br>
<div></div>
</div></div></div><h2 class="jobSectionHeader"><b>Responsibilities
</b></h2><div><div><div><div>Duties include, but not limited to:</div><ul><li>
Provide expert weapons system cybersecurity guidance and recommendations to program engineers, program managers, acquisition security program executive officer, Milestone Decision Authority (MDA), and AO.</li><li>
Translate and provide comprehensive NIST 800-53 requirements to ensure SSE and procurement solutions are incorporated into an integrated program protection scheme based upon known or anticipated risks.</li><li>
Knowledge of systems engineering principles, network architecture analysis, verification and validation of requirements, and understanding the risk management process and understanding of the operational context of weapon systems employment is critical.</li><li>
Provide subject matter expertise to support the AFPEO&rsquo;s intent to execute RMF to support assessment &amp; authorization of assigned systems including generating required artifacts such as Interim Authority to Test (IATT), Authority to Connect (ATC), and Authority to Operate (ATO) packages as well as associated reports and presentations.</li><li>
Execute risk reduction-based policies and procedures and develop system specific comprehensive cybersecurity processes to include implementation of continuous monitoring.</li><li>
Document system architectures, utilizing original equipment manufacturer documentation and system interface specifications, to support the cyber analysis, identification, selection, and tailoring of security and privacy controls necessary to protect the system.</li><li>
Provide expert level evaluation of designs and proposed implementation solutions to defend weapon systems and critical networks against malicious and non-malicious exploitation throughout the full acquisition lifecycle of portfolio programs.</li><li>
Evaluate threat data and develop residual risk recommendations and mitigations to senior DoD and AF leadership based on identification and analysis of weapons vulnerabilities.</li><li>
The Contractor will review and analyze interoperability requirements and will review, develop and evaluate resultant specifications and internal and external Interface Control Documents (ICDs).</li><li>
Review and propose technical recommendations at both the strategic and operational levels regarding critical technologies requiring protection, Program Protection Plans (PPP), and anti-tamper (AT) plans, cyber findings, vulnerabilities, and risks.</li><li>
Conduct technical evaluations on vendors' proposals to ensure that cybersecurity requirements are properly addressed.</li><li>
Assist and advise various working groups, planning teams and IPTs by preparing and reviewing agendas, coordinating topics and speakers, and researching, tracking and closing action items.</li><li>
Support multiple systems security working groups to develop a secure, resilient aircraft based on SSE principles.</li><li>
Provide expert identification, documentation, and assessment of threats, cyber findings, vulnerabilities, attack scenarios, impacts if exploited, and likely timelines for exploitation.</li><li>
Provide stakeholders with on-time deliverables, RMF artifacts, cyber impact assessments, and approaches to meet growing ISR &amp; SOF requirements.</li><li>
Deliver solutions which are ready for the AO approval under significantly reduced timelines required by special operations and quick reaction capability programs.</li><li>
Ensure that contractual documentation, such as statements of work, CDRLs, and SRDs, incorporate cybersecurity requirements that support the development of the assessment and authorization process.</li><li>
Support up to 33% of contract time on travel to support remote site, site visits, site audits, design reviews and engineering implementation reviews of network architectures.</li></ul><br>
<div></div>
</div></div></div><h2 class="jobSectionHeader"><b>Qualifications
</b></h2><div><div><div><div><b><i>Minimum Required Qualifications:</i></b></div><div></div><div><b><br>
Citizenship: </b>US Citizen</div><div><b>
Clearance: </b>Top Secret/SCI</div><div><b>
Certifications:</b> IAT level 2</div><div><b>
Minimum Qualifications:</b></div><ul><li>&bull; Bachelor&rsquo;s degree or master&rsquo;s degree in a related field and at least three years of</li></ul><div>
experience in the respective technical / professional discipline being performed, three of</div><div>
which must be in the DoD.</div><ul><li> OR, seven years of directly related experience with proper certifications as described in</li></ul><div>
the PWS labor category performance requirements, five of which must be in the DoD.</div><div></div><div><b><br>
Remote, Onsite, or Hybrid: </b>Onsite at WPAFB, OH.</div><div></div><div><br>
#LI-JC1</div>
</div></div></div><h2 class="jobSectionHeader"><b>Company Overview
</b></h2><div><div><div><div><b>Odyssey Systems </b>is a world-class technical, engineering, and integration company serving the warfighting ecosystem with airborne integration, ISR, C2, and warfighter readiness capabilities. Odyssey meets the military&rsquo;s operational needs by integrating layered defense systems from equipment, technology, and services to data, information, and business operations. We streamline defense acquisition and sustainment, engineering the technical battlefield with domain-specific proficiency to ensure lethality. Odyssey is dedicated to excellent contract execution, peak organizational performance, and fostering a workplace built on employee care.</div><div></div><div><br>
Odyssey is proud to live out our core values of commitment, ambition, and respect in our work and communities through OdysseyCares, a philanthropic group focused on giving back through direct donations, an employer match program, and volunteering events.</div><div></div><div><b><br>
Please note</b>: Final compensation for this position will be determined by various factors such as the Federal Government contract labor categories and contract wage rates, relevant work experience, specific skills and competencies, geographic location, education, and certifications.</div><div></div><div><b><i><br>
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities</i></b></div></div></div></div></div>

Simpli.fi

<div>
 <strong>
  Who We Are
  <br/>
  <br/>
 </strong>
 Simpli.fi provides marketing technologies, solutions, and workflow automation for advertisers and agencies of all sizes. We specialize in helping organizations that operate across many locations, jurisdictions, or local markets&mdash;where location matters and incrementality counts&mdash;by uniting data, automation, and intelligence to drive measurable growth.
 <br/>
 <br/>
 Our platform powers highly targeted, high-volume campaigns across omnichannel environments including CTV, native, mobile, display, and social. We deliver transparent performance with local precision at national scale. Simpli.fi enables marketers&mdash;from multi-location brands and independent agencies who serve them, to political, advocacy, and public-affairs organizations&mdash;to activate locally relevant messaging, measure real-world impact, and generate clear, actionable insights.
 <br/>
 <br/>
 Simpli.fi is backed by leading private equity firms Blackstone and GTCR. To learn more, visit Simpli.fi.
 <br/>
 <br/>
 <strong>
  What We&rsquo;re Looking For
  <br/>
  <br/>
 </strong>
 Simpli.fi is currently looking for a Cybersecurity Engineer, you will join a security team focused on practical risk reduction across endpoints, identity, logging, and compliance operations. This role is well suited to a systems-oriented generalist who can connect dots across tools and environments, understand how failures propagate, and help the organization improve security outcomes without losing momentum.
 <br/>
 <br/>
 This is an individual contributor role. This role is not siloed. You will work across endpoint security, identity, telemetry, and compliance workflows. You will have opportunities to make improvements that are visible across engineering and the broader company.
 <br/>
 <br/>
 Security is part of how we deliver a great workplace experience and build customer trust. The work in this role helps employees stay productive and safe, reduces disruption from preventable issues, and supports the evidence and assurance that customers and auditors rely on.
 <br/>
 <br/>
 <strong>
  Growth &amp; Learning
  <br/>
  <br/>
 </strong>
 You will have room to grow by owning meaningful outcomes end to end. That includes deepening expertise in endpoint security, identity, telemetry, and compliance operations, and learning adjacent systems through hands-on work, documentation, and automation. We prioritize durable improvements over heroics, so learning and progress are sustainable.
 <br/>
 <br/>
 <strong>
  How We Work
  <br/>
  <br/>
 </strong>
 We aim for a sustainable pace and clear priorities. This role has broad scope because it touches systems people rely on every day, not because we expect heroics. There is no mandatory on-call rotation for this position, and most work weeks are around 40 hours. When urgent incidents happen, we collaborate to resolve them, and that can occasionally require engagement outside normal hours. We value durable improvements, automation, and good documentation over &ldquo;always available&rdquo; expectations.
 <br/>
 <br/>
 <strong>
  What You&rsquo;ll Be Doing
 </strong>
 <br/>
 <br/>
 <ul>
  <li>
   Own and improve endpoint security outcomes across macOS and Windows
  </li>
  <ul>
   <li>
    Deployment, configuration, investigations, and remediation support
   </li>
  </ul>
  <li>
   Support incident response with a focus on diagnosis, recovery, and root cause understanding
  </li>
  <li>
   Use logs and telemetry to investigate events and identify patterns
  </li>
  <ul>
   <li>
    Correlate signals across systems rather than relying on a single tool
   </li>
  </ul>
  <li>
   Own operational security compliance workflows
  </li>
  <ul>
   <li>
    Maintain and improve SOC 2 evidence collection
   </li>
   <li>
    Track down evidence across systems and teams
   </li>
   <li>
    Ensure controls reflect real system behavior
   </li>
  </ul>
  <li>
   Administer and improve the company&rsquo;s Vanta implementation
  </li>
  <ul>
   <li>
    Maintain accurate integrations and control mappings
   </li>
   <li>
    Reduce manual evidence collection where possible
   </li>
  </ul>
  <li>
   Improve how security tooling and controls fit together through pragmatic configuration and automation
  </li>
  <li>
   Partner with IT and engineering stakeholders to translate technical risk and compliance needs into clear actions and tradeoffs
  </li>
  <li>
   Document systems, controls, and operational knowledge so improvements persist
   <br/>
  </li>
 </ul>
 <strong>
  YOU&rsquo;LL HAVE THE FOLLOWING TO SUCCEED IN THIS ROLE:
  <br/>
  <br/>
 </strong>
 <strong>
  Core Skills
 </strong>
 <br/>
 <br/>
 <ul>
  <li>
   Strong problem solving skills with close attention to detail
  </li>
  <li>
   Systems thinking and pattern recognition
  </li>
  <ul>
   <li>
    Ability to reason across endpoints, identity, networking, access controls, telemetry, compliance controls, and cloud environments
   </li>
  </ul>
  <li>
   A pragmatic security mindset
  </li>
  <ul>
   <li>
    Able to balance risk reduction, operational reality, and audit requirements
   </li>
  </ul>
  <li>
   Clear communication and translation skills
  </li>
  <ul>
   <li>
    Able to explain security and compliance requirements without alarmism or unnecessary friction
   </li>
  </ul>
  <li>
   Strong documentation and evidence hygiene
  </li>
  <ul>
   <li>
    Comfortable producing clear, accurate, and defensible artifacts
    <br/>
   </li>
  </ul>
 </ul>
 <strong>
  Technical Foundations
 </strong>
 <br/>
 <br/>
 <ul>
  <li>
   Strong systems and troubleshooting background
  </li>
  <ul>
   <li>
    Comfortable reasoning about operating systems, processes, and networking fundamentals
   </li>
   <li>
    Able to diagnose issues across macOS, Windows, and Linux environments
   </li>
  </ul>
  <li>
   Endpoint security fundamentals
  </li>
  <ul>
   <li>
    Experience operating endpoint security tooling and supporting investigations is strongly preferred
   </li>
   <li>
    Comfortable with investigation workflows and remediation support
   </li>
  </ul>
  <li>
   Identity and access familiarity
  </li>
  <ul>
   <li>
    Understanding how identity underpins access control and audit evidence
   </li>
   <li>
    Familiarity with identity providers such as Okta or comparable platforms
   </li>
  </ul>
  <li>
   Logging and telemetry experience
  </li>
  <ul>
   <li>
    Comfortable querying and correlating logs to support investigations and audit evidence
   </li>
   <li>
    SIEM experience is helpful, including Datadog or similar platforms
   </li>
  </ul>
  <li>
   Cloud platform familiarity
  </li>
  <ul>
   <li>
    Working knowledge of at least one cloud platform (AWS, GCP, or Azure) sufficient to support investigations, risk assessment, and compliance evidence needs
    <br/>
   </li>
  </ul>
 </ul>
 <strong>
  Compliance And Governance Operations
 </strong>
 <br/>
 <br/>
 <ul>
  <li>
   Hands-on experience supporting SOC 2 or similar audits
  </li>
  <ul>
   <li>
    Evidence collection, validation, and auditor interaction
   </li>
  </ul>
  <li>
   Experience working with compliance automation platforms such as Vanta
  </li>
  <ul>
   <li>
    Maintaining integrations and control mappings
   </li>
   <li>
    Identifying and closing evidence gaps
   </li>
  </ul>
  <li>
   Ability to connect written controls to real system behavior
  </li>
  <ul>
   <li>
    Avoids paper-only compliance
   </li>
   <li>
    Ensures controls remain accurate over time
    <br/>
   </li>
  </ul>
 </ul>
 <strong>
  Scripting And Automation
 </strong>
 <br/>
 <br/>
 <ul>
  <li>
   Comfortable with scripting across macOS, Linux, and Windows
  </li>
  <ul>
   <li>
    Able to read scripts, modify logic safely, and automate repetitive work
   </li>
   <li>
    Python is preferred, but comparable scripting experience is acceptable
    <br/>
   </li>
  </ul>
 </ul>
 <strong>
  Nice To Have
  <br/>
  <br/>
 </strong>
 (Useful but not required. No candidate is expected to have all of these.)
 <br/>
 <br/>
 <ul>
  <li>
   Experience with SIEM platforms and investigation workflows
  </li>
  <li>
   Deeper cloud security expertise in AWS, GCP, or Azure
  </li>
  <ul>
   <li>
    Examples include IAM design, security monitoring, network controls, or incident investigation in cloud environments
   </li>
  </ul>
  <li>
   Endpoint management experience (Jamf, Intune, GPO, MDM patterns)
  </li>
  <li>
   Experience with identity integrations and access control patterns (SSO, SAML, SCIM)
  </li>
  <li>
   Prior participation in external audits or customer security reviews
  </li>
  <li>
   Certifications (CISSP, CISM, etc.).
   <br/>
  </li>
 </ul>
 <strong>
  The Right Person Will
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Enjoy operating as a generalist with one or more anchor domains
  </li>
  <li>
   Be comfortable moving between security engineering, operations, and compliance work
  </li>
  <li>
   Prefer improving systems over producing one-off artifacts
  </li>
  <li>
   Take ownership of messy or underspecified areas and make them better over time
  </li>
  <li>
   Be comfortable saying they do not know something and then figuring it out
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Show Your Work
  <br/>
  <br/>
 </strong>
 We value demonstrated ability more than credentials. Skills gained through personal projects, self study, bootcamps, or non traditional experience are welcome.
 <br/>
 <br/>
 <strong>
  You May Share
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Technical documentation or runbooks you created
  </li>
  <li>
   Incident writeups or postmortems you contributed to
  </li>
  <li>
   Evidence workflows or automation you improved
  </li>
  <li>
   Scripts or tools you built
  </li>
  <li>
   Open source contributions or community involvement
   <br/>
   <br/>
  </li>
 </ul>
 Public examples are not required. Many strong engineers work entirely in private or internal systems, and we are happy to discuss your experience directly.
 <br/>
 <br/>
 <strong>
  Working With Us Has Its Rewards
  <br/>
  <br/>
 </strong>
 Awesome company environment and benefits with a great management team. Competitive pay based on experience, 17 PTO days, 401K match, long-term incentive plan and employer sponsored healthcare options. Hybrid work schedule. The company is focused on developing and mentoring employees!
 <br/>
 <br/>
 <strong>
  Candidates must be authorized to work in the United States. We are unable to provide visa sponsorship at this time.
 </strong>
</div>


Torch Technologies

<div><p><b>Torch Technologies
</b></p><p>Thank you for your interest in employment with Torch Technologies. We are a 100% employee-owned, Certified Great Place To Work and named Best Places to Work in Huntsville/Madison County, headquartered in Huntsville, AL. Our team provides superior research, development, and engineering services to the Federal Government and Department of War. As one of the nation&rsquo;s top 100 defense companies, the services we provide directly support the men and women who serve our country. Our corporate mission sums up the pride our employee-owners take in the work we do: &ldquo;Lighting the Pathway of Freedom&rdquo;. And, as a Certified Evergreen ESOP, we have made the commitment to grow and sustain our company for the next 100 years! Come grow with us!
</p><p></p><div><p>Torch Technologies has an exciting opportunity for a <b>Cybersecurity Engineer, Senior (ISSM) </b>located at Kettering, OH (Dayton/WPAFB area) to support our EPASS GB contract. As part of the AFLCMC/GB Business and Enterprise Systems Directorate (BES), the Maintenance Repair and Overhaul Initiative (MRO) is a DOTMLPF-P transformation and standardization of both the business processes and enabling materiel solution which provides Air Force Sustainment Center (AFSC) with an integrated capability for planning, scheduling and executing organic depot maintenance to support agile planning, optimized workload assignment, resource allocation and integrated quality. The MRO materiel solution is a web-enabled system operating wholly within the .mil network.
</p><p></p><p>As a <b>Cybersecurity Engineer, Senior ISSM </b>your duties include but may not be limited to:
</p><ul><li><p>P rovide the PMO/Capability Development Manager (CDM) cybersecurity support per DoDI 8500.01 to include assessing and continuously monitoring cybersecurity risk ensuring that legacy and new capabilities adhere to enterprise standards such as Risk Management Framework (RMF), Cybersecurity Framework (CSF), and National Institute of Standards and Technology (NIST) and per Authorization Official&rsquo;s Information System&rsquo;s Continuous Monitoring (ISCM) strategy.
</p></li><li><p>Completes and maintains required cybersecurity certification IAW AFMAN 17-1303;
</p></li><li><p>Ensures all AF IT cybersecurity-related documentation is current and accessible to properly authorized individuals;
</p></li><li><p>Supports the PM or ISO in maintaining current authorization to operate, approval to connect (if required), and implementing corrective actions identified in the plan of actions and milestones;
</p></li><li><p>Coordinates, with the PM and AO staffs, development of an ISCM strategy and monitors any proposed or actual changes to the system and its environment;
</p></li><li><p>Continuously monitors the IT and environment for security-relevant events;
</p></li><li><p>Assesses proposed configuration changes for potential impact to the cybersecurity posture;
</p></li><li><p>Assesses the quality of security controls implementation against performance indicators;
</p></li><li><p>Ensures cybersecurity-related events or configuration changes that impact AF IT authorization or adversely impact the security posture are formally reported to the AO and other affected parties, such as IOs, stewards, and AOs of interconnected IT;
</p></li><li><p>Ensures all ISSOs and privileged users receive necessary technical training and obtain cybersecurity certification IAW AFMAN 17-1301, Computer Security (COMPUSEC), AFMAN 17-1303, and maintain proper clearances IAW DoWI 8500.01; and,
</p></li><li><p>Ensures the AF IT is acquired, documented, operated, used, maintained, and disposed of properly IAW DoWI 5000.02 and DoWI 8510.01.
</p></li></ul></div><p></p><div><p><b>Job Requirements
</b></p><div><ul><li><p>U.S. Citizenship
</p></li><li><p>Master's or Doctorate Degree in a related field and 10 years of experience in the respective technical/professional discipline being performed, five years of which must be in the DoW OR
</p></li><li><p>Bachelor's Degree and 12 years of experience in the respective technical/professional discipline being performed, five of which must be in the DoW OR
</p></li><li><p>15 years of directly related experience with proper certifications as described in the PWS labor category performance requirements, eight of which must be in the DoW.
</p></li><li><p>Must have the knowledge, experience and recognized ability to be considered highly skilled in their technical/professional field.
</p></li><li><p>Must possess the ability to perform tasks independently and oversee the efforts of junior and journeyman contractor personnel within the technical/professional discipline. Demonstrates advanced knowledge of their technical/professional discipline as well as possess a comprehensive understanding and ability to apply associated standards, procedures and practices in their area of expertise (Program Office, Enterprise and Staff Level Support interface).
</p></li><li><p>All Cybersecurity professionals should possess experience providing guidance on the following to include, but not limited to:
</p><ul><li><p>Access control.
</p></li><li><p>Configuration management.
</p></li><li><p>System and communications protection.
</p></li><li><p>Contingency planning.
</p></li><li><p>Incident handling.
</p></li><li><p>System and information integrity.
</p></li><li><p>Security and privacy training and awareness; and,
</p></li><li><p>Software development activities, software and tools related to Cybersecurity.
</p></li></ul></li><li><p>Experience performing cybersecurity duties as outlined in DoDI 8500.01, AFI 17-130, and AFI 17-1301 for assigned AF IT.
</p></li><li><p>Experience validating, evaluating and analyzing finding results and developer adjudications using automated testing tools, e.g., Fortify, Checkmarx, SonarQube, and AppScan.
</p></li><li><p>Experience utilizing DoD tracking systems to input/document cybersecurity deficiencies, vulnerabilities, and change requests in the appropriate tracking system for each program, e.g., Jira, HP ALM, and eMASS.
</p></li><li><p>Experience with conducting information security continuous monitoring (ISCM) by maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decisions IAW approved ISCM strategy.
</p></li><li><p>Must have and maintain an active Secret security clearance.
</p></li><li><p>At a minimum, the successful candidate will meet the requirements for and maintain a personnel certification associated with the DCWF ISSM work role (722) at an advanced (senior) proficiency level as outlined in DoWI 8510.01, AFMAN 17-1305 and AFI 17-101 for assigned systems/applications:
</p><p>&middot; ISACA CISM
</p><p>&middot; United America Technologies CISSO
</p><p>&middot; FITSI FITSP-M
</p><p>&middot; GIAC GCIA
</p><p>&middot; GIAC GCSA
</p><p>&middot; GIAC GCIH
</p><p>&middot; GIAC GSLC
</p><p>&middot; GIAC GICSP
</p><p>&middot; (ISC)2 CISSP-ISSMP
</p><p>&middot; (ISC)2 CISSP
</p></li></ul><p></p><p><b>Preferred Qualifications:
</b></p><ul><li><p>Certified SCRUM Master
</p></li><li><p>Other Agile Certifications
</p></li><li><p>Working knowledge of the Agile Development methodology
</p></li><li><p>Experience using any, or all, of the following tools:
</p><ul><li><p>CheckMarx
</p></li><li><p>SonarQube
</p></li><li><p>Jira
</p></li><li><p>Confluence
</p></li><li><p>Mavin
</p></li><li><p>Jenkins
</p></li><li><p>Bitbucket<br>
</p></li></ul></li></ul><p></p><p><b>Schedule </b>: 40 Hrs/week
</p><p><b>Work Location: </b>Kettering, OH
</p><p><b>Travel </b>: 0-10%
</p><p><b>Relocation Assistance Available: </b>No
</p><p><b>Position Contingent Upon Award of Contract: </b>No
</p></div></div><p></p><p>#LI-EW1
</p><p></p><p><b>Benefits:<br>
</b></p><p></p><p>Torch Technologies is proud to offer a stable and professional work environment, a competitive salary, and an excellent, comprehensive benefit package including: ESOP participation, 401(k) match and safe-harbor contribution, medical, dental, vision, life insurance, short-term disability, long-term disability, flexible spending accounts, Health Saving Accounts and Health Reimbursement Accounts, EAP, education assistance, paid time off, and holidays.<br>
</p><p></p><p><b>Applying to Torch Technologies:<br>
</b></p><p></p><p>Only those candidates invited for an interview will be contacted. Employment at Torch Technologies is contingent upon the successful completion of a comprehensive background check.
</p><p></p><p>All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, citizenship, ancestry, marital status, protected veteran status, disability status or any other status protected by federal, state, or local law. Torch Technologies, Inc. participates in E-Verify.<br>
</p><p></p><p>If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access Careers Link as a result of your disability. You can request reasonable accommodations by sending an email to HR@torchtechnologies.com. Thank you for your interest in Torch Technologies.</p></div>

Cybersecurity Engineer, Senior (ISSM)

Search 5679+ Cybersecurity engineer jobs near you this March. New roles added regularly across leading industries. Apply today.

5679 cybersecurity engineer jobs Near Me

Sr. Cybersecurity Engineer

Senior Cybersecurity Engineer

Cybersecurity Engineer

Cybersecurity Engineer, Journeyman

Cybersecurity Engineer, Journeyman

Cybersecurity Engineer

Cybersecurity Engineer, Senior (ISSM)