Senior Cybersecurity Engineer

Carnegie Mellon University • Pittsburgh, PA

2d

About The Position

The Senior Cybersecurity Engineer will support the Cyber Risk and Resilience Directorate and the operational capabilities and evolution of the Cybersecurity Assurance Team (CA Team), focusing on cybersecurity, operational resilience, and applied research. The CA Team develops frameworks, models, tools, policies, practices, technical guidance, and training to help industry, government, and military organizations measure and improve their management of operational and technical risks to mission-critical services, including risks related to changes in technology such as artificial intelligence and agentic-driven systems.

The engineer will consult directly with mission partners and subject matter experts across the CA portfolio, support cybersecurity assessment standardization, develop and use security measurement approaches, and share expertise with the broader community. The role involves collaborative work on multidisciplinary teams, advising defense and critical infrastructure customers, and potentially researching new approaches to cybersecurity resilience across areas such as cyber operations, artificial intelligence, continuity planning and management, and organizational and social implications of cyber incidents and failures.

The role includes frequent travel (15–35%) to SEI and CMU locations, customer sites, conferences, and offsite meetings. The employee will be subject to a background investigation and must be able to obtain and maintain a Department of War security clearance. Applicants must already be legally authorized to work for CMU in the United States; CMU will not sponsor or take over sponsorship of an employment visa.

Requirements

• Bachelor’s degree in a relevant discipline and 10 years of applicable experience, or a master’s degree in a relevant discipline and 8 years of applicable experience, or a Ph.D. in a relevant discipline and 5 years of applicable experience.
• Track record of successfully leading projects in a technical discipline and driving projects and teams toward high-impact outcomes.
• Ability to lead diverse teams and influence people outside the immediate team or span of control.
• Experience contributing to multiple simultaneous projects and working effectively in a creative, high-energy environment.
• Ability to experiment with new practices and develop effective processes, practices, and infrastructure to support successful projects.
• Strong collaborative, diplomatic communication skills with customers and colleagues at varying levels of knowledge and experience.
• Ability to understand overall goals and direction while examining technical details, and to present complex ideas to audiences without deep subject-area knowledge.
• Ability to obtain and maintain a Department of War security clearance, subject to a background investigation.
• Currently legally authorized to work for CMU in the United States; CMU will not sponsor or take over sponsorship of an employment visa.

Nice To Haves

• Mid- to senior-level industry experience managing information security risks and implementing controls.
• Mid- to senior-level experience managing technology controls and risks, such as change management, infrastructure, capacity planning, availability, cloud services, and technology implementations.
• Mid- to senior-level experience managing continuity-related controls and risks, such as business continuity and disaster recovery.
• Experience deploying information technology, including implementing security technology or designing, building, and maintaining networks.
• Consulting experience with private industry or government customers, including leading projects and engagements.
• Familiarity with cybersecurity and resilience standards such as NIST CSF, NIST SP 800 series, and ISO 27000 series.
• Knowledge of audit and assessment methodologies, tactics, techniques, and procedures.
• Knowledge of critical infrastructure protection concepts and standards.
• Understanding of maturity model concepts, such as CMMI and the Financial Sector Cyber Profile.
• Strong writing and editing ability.
• Ability to participate as a member of a process action team or instructional design working group.
• Experience with course and information mapping, flowcharting, or similar methods.
• Certifications such as A+ CE, CCNA-Security, CND, Network+ CE, SSCP, CISSP, CISM, CISA, PMP, or equivalent experience.
• Some military experience may be beneficial for understanding the institute’s mission and stakeholders, but it is not required.

Responsibilities

• Lead engagements with customers and mission partners, representing the CA Team’s and SEI’s work.
• Contribute to customer projects intended to advance the state of the art in cybersecurity.
• Regularly present SEI’s mission and work to stakeholders.
• Engage with communities of interest through publications and presentations.
• Build and maintain relationships with relevant research and technology communities.
• Continue developing cybersecurity knowledge and skills and stay current on emerging trends relevant to the team’s portfolio.
• Support cybersecurity assessment standardization and develop and employ security measurement approaches.
• Provide direct consulting to mission partners and subject matter experts across the CA portfolio.
• Lead technical projects and diverse teams in analyzing and solving real-world problems, developing engineering guidance, and applying or tailoring technologies and resources.
• Mentor, motivate, and empower less-experienced team members.
• Travel frequently (15–35%) to SEI and CMU locations, customer sites, conferences, and offsite meetings.

Benefits

• Employee benefits are referenced, with a link to a listing of Carnegie Mellon University employee benefits; specific benefits are not detailed in the posting.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior