Maintain current Security Technical Implementation Guides (STIGs), Security Content Automation Protocol (SCAP) benchmarks, Nessus plug-ins, and vulnerability signatures through scheduled updates.
Lead Enterprise Audit (EA) engineering activities supporting Intelligence Community audit requirements, including implementation of ICS 500-27 audit standards.
Develop, maintain, and enhance enterprise audit strategies, audit dashboards, and security monitoring capabilities.
Collaborate with developers, system engineers, and cybersecurity teams to implement enterprise audit logging, audit handling procedures, and audit data-sharing agreements.
Lead implementation and continuous improvement of Zero Trust Architecture (ZTA) initiatives by: Developing Zero Trust Roadmaps Assessing organizational maturity Identifying capability gaps Defining implementation priorities Developing Zero Trust metrics and dashboards
Developing Zero Trust Roadmaps
Assessing organizational maturity
Identifying capability gaps
Defining implementation priorities
Developing Zero Trust metrics and dashboards
Configure, administer, and maintain the enterprise Governance, Risk, and Compliance (GRC) platform (RSA Archer or equivalent), including: Database administration Application configuration Patch installation System upgrades Workflow customization Security Control Catalog management User administration and training
Database administration
Application configuration
Patch installation
System upgrades
Workflow customization
Security Control Catalog management
User administration and training
Configure and maintain security control libraries aligned with: NIST SP 800-53 NIST RMF CNSSI 1253 ICD 503 DHS 4300C Intelligence Community overlays
NIST SP 800-53
NIST RMF
CNSSI 1253
ICD 503
DHS 4300C
Intelligence Community overlays
Evaluate emerging cybersecurity technologies, including Artificial Intelligence (AI), Machine Learning (ML), security automation, orchestration, and advanced analytics, to improve enterprise cybersecurity capabilities.
Participate in Intelligence Community working groups focused on Cloud Security, Zero Trust, DevSecOps, AI/ML, and cybersecurity modernization.
Prepare executive briefings, technical white papers, architecture diagrams, engineering recommendations, and strategic roadmaps for DHS leadership.
Mentor cybersecurity engineers and provide technical leadership across multiple engineering disciplines.
Minimum Qualifications
Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance.
Minimum 10 years of progressively responsible experience supporting cybersecurity engineering for Federal Government or Intelligence Community programs.
Bachelor's degree in Cybersecurity, Computer Science, Systems Engineering, Information Technology, Information Assurance, or a related technical discipline.
Master's degree is preferred.
Preferred Qualifications
Google Professional Cloud Security Engineer certification.
Microsoft Certified: Azure Security Engineer Associate certification.
RSA Archer Professional certification.
Experience supporting DHS Intelligence & Analysis (I&A) or other Intelligence Community cybersecurity programs.
Experience implementing AI/ML security controls and supporting Intelligence Community AI governance frameworks.
Experience with Security Orchestration, Automation, and Response (SOAR) platforms.
Experience supporting National Cross Domain Strategy and Management Office (NCDSMO) mandates and Cross Domain Solution (CDS) engineering.
Knowledge of Kubernetes security, Infrastructure-as-Code (Terraform/CloudFormation), container security, and secure CI/CD architectures.
Experience implementing Continuous Authorization (cATO) and automated compliance validation.
Required Certifications
The following current certifications are required:
Certified Information Systems Security Professional (CISSP)
AWS Certified Solutions Architect or AWS Certified Security – Specialty
