Senior Cybersecurity Engineer

PEMCCO•Washington, DC

2d•Onsite

About The Position

PEMCCO is seeking a Senior Cybersecurity Engineer to design, implement, assess, and maintain cybersecurity capabilities that protect government information systems, networks, applications, and data. This role is ideal for a seasoned cybersecurity professional who enjoys security engineering, risk management, compliance, vulnerability management, and strengthening organizational security posture. This opportunity is a strong fit for candidates with experience in cybersecurity engineering, information assurance, information security, system security, risk management, RMF, A&A, security architecture, vulnerability management, or incident response. About PEMCCO PEMCCO supports complex technical and operational programs by providing skilled professionals who help customers achieve mission success. We offer opportunities to work on impactful projects, collaborate with experienced teams, and contribute to innovative solutions that support critical government operations. Job Overview As a Senior Cybersecurity Engineer, you will serve as a senior cybersecurity professional responsible for protecting mission-critical systems and supporting organizational security objectives. You will lead cybersecurity engineering initiatives, assess security risks, develop mitigation strategies, support compliance efforts, and work closely with stakeholders to ensure cybersecurity requirements are integrated throughout the system lifecycle. This position offers the opportunity to work on complex security challenges while helping organizations maintain resilient, compliant, and secure environments.

Requirements

Master's degree in Cybersecurity, Computer Engineering, Electrical Engineering, Computer Science, Mathematics, or a related field
Ten (10) years of experience in cybersecurity, information assurance, information security, cybersecurity engineering, system security, or a related field
Advanced knowledge of cybersecurity principles, technologies, and best practices
Knowledge of Risk Management Framework (RMF), NIST standards, and DoD cybersecurity requirements
Knowledge of security architecture, security engineering, and system security concepts
Ability to assess cybersecurity risks and develop effective mitigation strategies
Ability to interpret and apply cybersecurity policies, regulations, and standards
Strong analytical, organizational, and problem-solving skills
Experience investigating security events and identifying root causes
Strong written and verbal communication skills
Ability to communicate effectively with both technical and non-technical audiences
Ability to lead technical efforts and mentor team members
Ability to prepare and review technical documentation, reports, and security artifacts
Ability to obtain and maintain a government security clearance if required
Must meet applicable DoD 8140 workforce qualification requirements if required by contract

Nice To Haves

Advanced cybersecurity training or specialized coursework in security engineering, risk management, or cybersecurity operations
Experience supporting Department of Defense or Federal Government programs
Experience leading RMF and A&A efforts
Experience supporting security control assessments and continuous monitoring activities
Experience in cybersecurity architecture, vulnerability management, or incident response
Experience mentoring cybersecurity professionals and supporting team development

Responsibilities

Design, implement, and maintain cybersecurity solutions for information systems, networks, and applications
Lead cybersecurity engineering efforts supporting system development, modernization, and sustainment activities
Conduct cybersecurity risk assessments, vulnerability analyses, and security control evaluations
Develop and implement mitigation strategies for identified vulnerabilities and security findings
Support Risk Management Framework (RMF) and Assessment & Authorization (A&A) activities
Review system architectures, designs, and configurations to ensure compliance with cybersecurity requirements
Develop and maintain cybersecurity documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action & Milestones (POA&Ms)
Support continuous monitoring activities and evaluate the effectiveness of implemented security controls
Investigate cybersecurity incidents, analyze impacts, and support remediation efforts
Coordinate with engineers, system administrators, developers, and government stakeholders to integrate cybersecurity requirements throughout the system lifecycle
Evaluate emerging threats, technologies, and security best practices and recommend improvements
Prepare technical reports, briefings, and recommendations for leadership and customer representatives
Provide technical guidance and mentorship to junior cybersecurity personnel