Sr Cybersecurity Engineer

Sierra Nevada Corporation•Herndon, VA

2d•$150,661 - $207,160•Hybrid

About The Position

The Senior Cybersecurity Engineer designs, tests, and implements secure operating systems, networks, and security monitoring tools. This expert-level role manages IT security systems, leads incident responses, conducts risk assessments, develops security controls, and researches and integrates security tools and technologies to enhance the company’s security infrastructure. As part of SNC’s corporate team, the position supports the company and its business areas with strategic direction and business support. The engineer owns and continuously improves security operations platforms, aligns enterprise security platforms with architectural requirements and risk mitigation needs, and advances Zero Trust security controls. The role also develops standards and improvement roadmaps, advises on risk treatment, implements controls and audit evidence, mentors junior engineers, and collaborates with cross-functional teams and senior leadership. The position requires the ability to obtain and maintain a Secret U.S. Security Clearance and U.S. citizenship. Work may be in an office or hybrid environment, and travel may be required. The estimated starting salary range is $150,661.49–$207,159.55, depending on factors including skills, experience, education, training, certifications, and applicable geographic differentials. Annual incentive pay is offered based on performance.

Requirements

Bachelor’s degree in Cybersecurity, Network Engineering, Information Technology, or a related Engineering field; relevant experience may substitute for the educational requirement.
At least 8 years of experience in a related role; without a degree, at least 12 years of related experience is required. A higher-level relevant degree may substitute for experience.
Deep and extensive understanding of cybersecurity principles and network architectures.
Proven leadership experience with security monitoring and assessment tools.
Experience supporting, troubleshooting, and administering a variety of networks, operating systems, and applications.
Expert knowledge of data security administration principles, methods, and techniques.
Strong knowledge and experience administering a variety of current Microsoft platforms.
Advanced understanding of domain structures, user authentication, and digital signatures.
Hands-on engineering experience in a Zero Trust architecture environment, focused on security operations platforms including network detection and response, endpoint protection, and data security.
Ability to work with a security architect or senior technical leader to engineer solutions from architectural direction through design, implementation, and documentation.
Ability to obtain and maintain a Secret U.S. Security Clearance; U.S. citizenship is required.
Ability to work in an office or hybrid environment, sit at a desk and work on a computer for prolonged periods, occasionally lift up to 20 pounds, and travel as needed.

Nice To Haves

Advanced technical security certifications such as CISSP, CompTIA CASP+/SecurityX, or GIAC certifications.
Expert knowledge of how enterprise security platforms work together to support security operations requirements, including experience maturing and optimizing enterprise security platforms.
Success defining and leading implementation of platform management standards and requirements.
Experience implementing infrastructure-as-code or other automated security platform management methodologies.
Experience working in regulated or high-sensitivity enterprise environments such as aerospace and defense, healthcare, or finance.
Advanced understanding of domain structures, user authentication, and digital signatures, including PKI and certificate services.
Exceptional leadership, analytical, problem-solving, and communication skills.
Ability to read and interpret security and technical documentation.

Responsibilities

Manage and continuously improve a portfolio of security operations platforms, including enterprise logging and detection platforms used by security operations analysts.
Partner with security operations analysts to optimize platform performance and effectiveness.
Work with the Principal Architect to ensure enterprise security platforms and tools meet architectural requirements and mitigate enterprise security risks, including through coverage and gap analysis, dependency management, and capability planning.
Support alignment of enterprise security engineering with Zero Trust principles and improve Zero Trust maturity by delivering device, network, workload, and data security controls.
Work with junior engineers to develop and document security control standards, tool management standards, and continuous improvement roadmaps.
Analyze, assess, and advise on treatment of identified enterprise security risks, including designing and implementing technical controls, identifying compensating controls, and documenting decisions.
Develop and implement security controls mapped to NIST SP 800-171, CMMC, and local security policy requirements.
Provide technical evidence and design documentation to support audits and assessments.
Mentor and coach junior engineers on advanced security practices, platform maturity, and strategic thinking.
Collaborate with cross-functional teams and senior leadership to integrate security across IT projects.
Design, test, and implement secure operating systems, networks, and security monitoring tools.
Manage IT security systems, lead incident responses, conduct risk assessments, and research and integrate security tools and technologies.