Cyber Security Engineer TS SCI + POLY

Aperio Global•McLean, VA

5d•$195 - $225

About The Position

We are seeking a Senior Cybersecurity Engineer in Mclean VA to support the secure development, deployment, and lifecycle management of systems and tools. This role is responsible for driving risk management and compliance efforts while partnering across teams to ensure secure and efficient system implementation.

Requirements

8 + years experience in cybersecurity engineering, system security, or related roles.
Strong knowledge of security frameworks, risk management processes, and compliance standards.
Familiarity with cloud environments and secure system integration practices.
Ability to communicate complex security concepts to technical and non-technical stakeholders.
Experience with system lifecycle security, including assessment, authorization, and continuous monitoring.
This position requires a TS SCI with POLY. ONLY candidates who have the appropriate clearance level will be considered.

Nice To Haves

Experience with system accreditation processes

Responsibilities

Support and guide the secure development, deployment, and ongoing maintenance of tools and systems.
Manage accreditation and authorization processes for both existing and planned systems.
Identify, assess, and help mitigate security risks across system environments.
Collaborate with stakeholders, including leadership and product teams, to meet development goals while ensuring alignment with security policies and governance requirements.
Provide analysis and recommendations on system architectures, configurations, and data flows throughout the full lifecycle, including development, testing, operations, maintenance, and decommissioning.
Assist in identifying and implementing security controls; recommend mitigation strategies for vulnerabilities, system exceptions, and Plans of Action and Milestones (POA&Ms); and support remediation of identified findings.
Work closely with Information System Security Managers (ISSMs) to promote streamlined, low-risk system implementations.
Partner with cloud service providers to support integration efforts and provide security recommendations.
Develop and maintain System Security Plans (SSPs) and related documentation.
Coordinate with development teams to integrate security and compliance requirements into systems and help prioritize implementation efforts.
Support the adoption of advanced assessment, authorization, and testing practices, including automated capabilities where appropriate.
Conduct research and evaluate emerging technologies to enhance authorization processes and support risk assessments.
Assist teams in adapting program plans in response to evolving priorities and requirements.
Ensure systems remain compliant with applicable directives, standards, and security frameworks.