Cybersecurity Engineer

Lumbee Tribe Holdings, Inc.•Camp Pendleton North, CA

2d•$110,000 - $120,000•Onsite

About The Position

The Cybersecurity Engineer provides software assurance testing expertise and cybersecurity engineering support based on offensive assessment findings and independent engineering analysis. The role supports static and dynamic code analysis, code review reporting, security posture assessments, vulnerability mitigation engineering, system hardening guidance, DCO detectability engineering, and DCO integration. The incumbent connects offensive findings with implementable engineering changes that improve the survivability and defensibility of Marine Corps systems for DCO operators. This is an exempt, full-time, on-site position at the MCTSSA Cyber Branch at Camp Pendleton, California, scheduled for standard business hours from 8:00 a.m. to 5:00 p.m. The role requires an active DoD Secret clearance. Travel is anticipated to be less than 10% within the Continental United States. The position has no supervisory responsibilities and reports to the MCTSSA Cyber Branch Lead / Assigned Program Manager.

Requirements

Five or more years of demonstrated experience in cybersecurity.
Two or more years of demonstrated experience with tools such as FTK, Wireshark, Autopsy, or similar technologies.
One or more years of demonstrated experience developing code in languages such as Python, C/C++, Ruby, or similar.
Active DoD Secret clearance.
Ability to meet the physical requirements of the role, including extended computer use and close visual attention to technical detail, with occasional lifting of IT equipment up to 25 lbs.

Nice To Haves

Information Assurance Technical (IAT) Level I or Level II certification.
Bachelor’s degree in Cybersecurity, Computer Science, or equivalent.
Certified Secure Software Lifecycle Professional (CSSLP), Offensive Security Exploit Developer (OSED), or equivalent software assurance certification.
Experience with DoD and Marine Corps Risk Management Framework (RMF), STIG implementation, and ACAS/Nessus vulnerability management.

Responsibilities

Develop technically grounded mitigation recommendations for vulnerabilities identified during Cyber Assessment events, software assurance reviews, and vulnerability scans, tailored to each program’s operational and programmatic constraints.
Provide system and network configuration hardening guidance based on assessment findings, applicable STIGs, and industry best practices, including implementation steps for program engineers and administrators.
Recommend system or network changes that improve DCO Marines’ ability to monitor, detect, and respond to adversarial activity, including sensor placement, logging configuration, alerting thresholds, and data logging standards.
Assist with integrating program systems with designated DCO providers’ tools, processes, and personnel; produce DCO System Playbooks with incident response procedures for assessed systems.
Implement STIG checklists across technologies and review Windows, Linux, Cloud, network/application STIGs, DoD Security Requirement Guides (SRGs), and vendor hardening guides.
Administer, configure, and support IT infrastructure, including operating systems, network components, and application security.
Run ACAS vulnerability scans, generate reports, and propose remediations for open findings.
Monitor, report, and respond to changes in application security posture; create and track audit reports and metrics; report issues to the Information System Security Manager (ISSM).
Support cyber breach investigations and analyze multiple data sources to identify indicators of compromise.
Draft client reports explaining findings, recommendations, and engineering rationale for non-technical Program Office stakeholders.
Use PowerShell, JavaScript, or Python to automate repetitive cybersecurity engineering and reporting tasks.
Collaborate with cybersecurity engineers and penetration testers to review security tool issues, develop integrated solutions, and ensure recommendations are implementable within program operational constraints.
Perform additional duties as assigned by the Program Manager.