Cybersecurity Engineer

Carnegie Mellon University•Pittsburgh, PA

2d•Onsite

About The Position

The Cybersecurity Engineer is part of the Cyber Risk and Resilience Directorate and supports the Cybersecurity Assurance Team (CA Team), focusing on cybersecurity, operational resilience, and applied research. The team develops frameworks, models, tools, policies, practices, technical guidance, and training to help industry, government, and military partners measure and improve management of operational and technical risks to mission-critical services, including risks associated with emerging technologies such as artificial intelligence and agentic-driven systems. The role involves consulting directly with mission partners and subject matter experts, standardizing cybersecurity assessments, developing and applying security measurement approaches, and sharing expertise with the broader community. The engineer works collaboratively on multidisciplinary teams to solve customer challenges and serves as a trusted advisor to defense and critical infrastructure customers. Research opportunities include exploring new approaches to cybersecurity resilience across areas such as cyber operations, artificial intelligence, continuity planning and management, and organizational and social implications of cyber incidents and failures. The position includes frequent travel (15–35%) to SEI and CMU community locations, customer sites, conferences, and offsite meetings. The employee must be able to obtain and maintain a Department of War security clearance and be legally authorized to work for CMU in the United States; CMU will not sponsor or assume sponsorship of an employment visa.

Requirements

A BS degree in a relevant discipline and 8 years of applicable experience, or an MS degree in a relevant discipline and 5 years of applicable experience, or a PhD in a relevant discipline and 2 years of applicable experience.
A track record of successfully leading projects in a technical discipline and driving projects toward high-impact outcomes.
Ability to lead diverse teams in analyzing and solving real-world problems and developing engineering guidance, including through leadership by influence.
Experience contributing to multiple simultaneous projects and working effectively in a creative, high-energy environment.
Ability to experiment with new practices and develop effective processes, practices, and infrastructure to support successful projects.
Strong communication skills, including the ability to collaborate diplomatically with customers and colleagues, understand both the big picture and technical details, and explain complex ideas to people without deep subject-area knowledge.
Ability to obtain and maintain a Department of War security clearance, subject to a background investigation.
Must be currently legally authorized to work for CMU in the United States; CMU will not sponsor or assume sponsorship of an employment visa.
Experience or knowledge in several of the following areas: managing information security risks and implementing controls; managing technology controls and risks such as change management, infrastructure, capacity planning, availability, cloud services, and technology implementations; managing continuity controls and risks such as business continuity and disaster recovery; deploying IT, including implementing security technology or designing, building, and maintaining networks; consulting for private industry or government customers, including leading projects and engagements; familiarity with cybersecurity and resilience standards such as NIST CSF, NIST SP 800 series, and ISO 27000 series; audit and assessment methodologies, tactics, techniques, and procedures; critical infrastructure protection concepts and standards; maturity model concepts such as CMMI and the Financial Sector Cyber Profile; and collaborative, diplomatic work with customers, colleagues, managers, and staff.

Nice To Haves

Strong writing and editing ability.
Ability to interact with others and function as a member of a process action team or instructional design working group.
Experience with course and information mapping, flowcharting, or similar activities.
Certifications such as A+ CE, CCNA-Security, CND, Network+ CE, SSCP, CISSP, CISM, CISA, or PMP, or equivalent experience.
Military experience may be beneficial for understanding the institute’s mission and stakeholders, but is not required.

Responsibilities

Lead engagements with customers and mission partners, representing the CA Team’s and SEI’s work.
Contribute to customer projects designed to advance the state of the art in cybersecurity.
Represent SEI by presenting its mission and work to stakeholders.
Engage with communities of interest through publications and presentations.
Build and maintain relationships with relevant research and technology communities.
Continue developing cybersecurity knowledge and skills and stay current on emerging trends relevant to the team’s portfolio.
Support cybersecurity assessment standardization and develop and employ security measurement approaches.
Conduct research into novel methods and approaches for managing cybersecurity resilience.
Mentor, motivate, and empower less-experienced team members.