Senior Principal Cyber Systems Engineer

Serco Group • Orlando, FL

34d

About The Position

Serco seeks a Senior Principal Cyber Systems Engineer for its Combat Air Force Distributed Mission Operations (CAF DMO) 3.0 program in Orlando, FL. The CAF DMO 3.0 program, via its Distributed Mission Operations Network (DMON), provides world-class integration training in large force and small team formats to combat units around the globe against cutting-edge threats in a boundless virtual battlespace. The U.S. Air Force can only utilize its full capability against modern threats in a virtual environment. Be a part of that environment and continue to make the USAF the best air force in the world. If selected, you will support the DMON Systems Security Engineering team with: Engaging security stakeholders-including the Security Controls Assessor (SCA), Program Security Officer (PSO), and Compliance & Vulnerability Assessment (CVA) teams-to review security architectures, plans, risks, and mitigation strategies. Designing, developing, and maintaining Ansible playbooks, agentic Artificial Intelligence (AI) workloads, and related automation to deploy and enforce security configurations across enterprise systems and perform cybersecurity tasks (e.g., security tests, continuous monitoring activities, etc.). Conducting system security assessments to validate compliance with applicable security controls, requirements, and organizational policies. Performing compliance scans and analyses to ensure system configurations align with DoD Information Systems (DISA) Security Technical Implementation Guides (STIGs) and other applicable security best practices. Executing functional testing of deployed security services and controls to confirm operational effectiveness and alignment with design intent. Working closely with various technical teams and stakeholders to integrate new security technologies, troubleshoot issues, remediate vulnerabilities, and improve security postures.

Requirements

• An active DoD Secret Clearance with ability to obtain TS/SCI and SAP/SAR
• Bachelor's Degree in STEM (Computer Science, Engineering, Information Technology, or related discipline) and 8 Years' Experience;
• OR a Master's degree with 6 years' experience;
• OR a PhD with 4 years' experience
• Demonstrated experience implementing NIST 800-37 Risk Management Framework (RMF)
• Demonstrated experience implementing NIST 800-53 Security and Privacy Controls
• Familiarity with DISA STIGs and security best practices
• Demonstrated experience developing and implementing Ansible playbooks within Red Hat Ansible Automation Platform (AAP) or similar automation frameworks
• Demonstrated experience conducting or supporting security assessments and continuous monitoring activities
• Demonstrated experience performing cybersecurity compliance and vulnerability scans, analysis, and reporting
• Demonstrated experience with scripting languages such as (Bash, Python, PowerShell etc.)
• Ability to troubleshoot and solve problems (e.g., breaking down problems, collaborating about problems and solutions, designing solutions, etc.)
• Ability to document concepts, approaches, and rationale in an understandable manner (especially as part of problem solving)
• Must possess, or obtain within six months, a DoD 8140 IAT Level II or higher (i.e. Security+, CySA+, CISSP)
• The ability to travel up to 10% of the time.

Nice To Haves

• Experience with implementing Joint Special Access Program (SAP) Implementation Guidance (JSIG)
• Prior experience as an Information Systems Security Engineer (ISSE)
• Possess cloud certifications such as AWS Security Specialty, Azure Security Engineer, or CCSP
• Experience engineering security solutions using Artificial Intelligence (AI)
• Possess an active DoD Top Secret security clearance

Responsibilities

• Engaging security stakeholders-including the Security Controls Assessor (SCA), Program Security Officer (PSO), and Compliance & Vulnerability Assessment (CVA) teams-to review security architectures, plans, risks, and mitigation strategies.
• Designing, developing, and maintaining Ansible playbooks, agentic Artificial Intelligence (AI) workloads, and related automation to deploy and enforce security configurations across enterprise systems and perform cybersecurity tasks (e.g., security tests, continuous monitoring activities, etc.).
• Conducting system security assessments to validate compliance with applicable security controls, requirements, and organizational policies.
• Performing compliance scans and analyses to ensure system configurations align with DoD Information Systems (DISA) Security Technical Implementation Guides (STIGs) and other applicable security best practices.
• Executing functional testing of deployed security services and controls to confirm operational effectiveness and alignment with design intent.
• Working closely with various technical teams and stakeholders to integrate new security technologies, troubleshoot issues, remediate vulnerabilities, and improve security postures.

Benefits

• Medical, dental, and vision insurance
• Robust vacation and sick leave benefits, and flexible work arrangements where permitted by role or contract
• 401(k) plan that includes employer matching funds
• Tuition reimbursement program
• Life insurance and disability coverage
• Optional coverages you can buy, including pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal, ID theft protection
• Birth, adoption, parental leave benefits
• Employee Assistance Plan that includes counseling conditions

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Industry: Administrative and Support Services
• Number of Employees: 5,001-10,000 employees