Cybersecurity Engineer

Software Engineering Institute | Carnegie Mellon University • Pittsburgh, PA

4d • Onsite

About The Position

The Cybersecurity Engineer will join the Cyber Risk and Resilience Directorate and support the operational capabilities and evolution of the Cybersecurity Assurance Team (CA Team). The role focuses on cybersecurity, operational resilience, and applied research. The CA Team develops frameworks, models, tools, policies, practices, technical guidance, and training to help industry, government, and military organizations measure and improve management of operational and technical risks to mission-critical services, including risks associated with changing technologies such as artificial intelligence and agentic-driven systems.

The engineer will consult directly with mission partners and subject matter experts across the CA portfolio, support standardization of cybersecurity assessments, develop and apply security measurement approaches, and share expertise with the broader community. The role involves collaborative work on multidisciplinary teams addressing complex customer challenges in varied environments, serving as a trusted advisor to defense and critical infrastructure customers, and potentially researching novel approaches to cybersecurity resilience across areas such as cyber operations, AI, continuity planning and management, and organizational and social responses to cyber incidents and failures.

The position includes frequent travel (15–35%) to SEI and CMU community locations, customer sites, conferences, and offsite meetings. The employee must be able to obtain and maintain a Department of War security clearance and be legally authorized to work for CMU in the United States; CMU will not sponsor or assume sponsorship of an employment visa. The position is based in Pittsburgh, Pennsylvania, and is regular, full-time staff employment.

Requirements

• Bachelor’s degree in a relevant discipline and 8 years of applicable experience, or a master’s degree in a relevant discipline and 5 years of applicable experience, or a Ph.D. in a relevant discipline and 2 years of applicable experience.
• Track record of successfully leading projects in a technical discipline and achieving high-impact outcomes.
• Ability to lead diverse teams in analyzing and solving real-world problems, develop engineering guidance, and apply and tailor technologies and resources.
• Ability to lead by influence beyond the immediate team or span of control.
• Experience contributing to multiple simultaneous projects and working effectively in a creative, high-energy environment.
• Ability to experiment with new practices and develop effective processes, practices, and infrastructure for successful projects.
• Ability to mentor, motivate, and empower less-experienced team members.
• Strong communication skills, including the ability to work collaboratively and diplomatically with customers and colleagues at all levels.
• Ability to understand the big picture and project goals while investigating technical details, and to explain complex ideas to people without deep subject-matter knowledge.
• Experience or knowledge in several relevant areas, including information security risk management and controls; technology controls and risks; continuity-related controls and risks; IT deployment; customer consulting and project leadership; cybersecurity and resilience standards; audit and assessment methodologies; critical infrastructure protection; and maturity models.
• Ability to obtain and maintain a Department of War security clearance, subject to a background investigation.
• Currently legally authorized to work for CMU in the United States; CMU will not sponsor or take over sponsorship of an employment visa.

Nice To Haves

• Strong writing and editing ability.
• Ability to work as a member of a process action team or instructional design working group.
• Experience with course and information mapping, flowcharting, or similar work.
• Certifications such as A+ CE, CCNA-Security, CND, Network+ CE, SSCP, CISSP, CISM, CISA, or PMP, or equivalent experience.
• Military experience may be beneficial for understanding the institute’s mission and stakeholders, but is not required.

Responsibilities

• Lead engagements with customers and mission partners, representing the CA Team’s and SEI’s work.
• Contribute to customer projects designed to advance the state of the art in cybersecurity.
• Present SEI’s mission and work to stakeholders, including through publications and presentations.
• Build and maintain relationships with relevant research and technology communities.
• Continue developing cybersecurity knowledge and skills and stay current on emerging trends relevant to the team’s portfolio.
• Support cybersecurity assessment standardization and develop and employ security measurement approaches.
• Consult with mission partners and subject matter experts across the CA portfolio.
• Contribute to applied research into methods for managing cybersecurity resilience.
• Mentor, motivate, and empower less-experienced team members.
• Lead diverse teams in analyzing and solving real-world problems and develop engineering guidance.
• Travel frequently (15–35%) to SEI and CMU community locations, customer sites, conferences, and offsite meetings.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level