Cybersecurity Principal

Applied Research Solutions•Bedford, MA

14h•$200,000 - $220,000

About The Position

Applied Research Solutions (ARS) is seeking an experienced cybersecurity professional to support critical Air Force programs at Hanscom AFB. The position provides advanced technical expertise in system security, threat detection, vulnerability analysis, and cyber operations, helping strengthen system security, identify emerging threats, and provide technical recommendations that support mission readiness. The role focuses on Risk Management Framework (RMF) requirements and system authorizations, security control mapping, security monitoring and incident investigation, vulnerability assessment, and cybersecurity solutions for cloud systems, devices, and networks. The successful candidate will provide technical cybersecurity briefings and recommendations to senior Department of the Air Force (DAF) cybersecurity leadership and serve as a technical resource to program stakeholders. In the first 90 days, the employee will learn the program’s systems, architecture, security requirements, RMF authorization status, cyber tools, monitoring processes, and stakeholders. They will begin evaluating controls, reviewing SIEM/SOAR dashboards, analyzing logs, and identifying vulnerabilities or security gaps. Over the first year, the employee will help improve threat monitoring, investigate potential incidents, recommend mitigations and cybersecurity improvements, contribute to vulnerability assessments and advanced threat analysis, and build trusted working relationships with government customers, program leadership, and technical teams. ARS describes itself as a provider of technically integrated solutions supporting customer missions. It highlights professional growth, meaningful mission work, work/life balance, a competitive benefits package, awards and recognition programs, and personalized attention from senior leadership. Employment is contingent upon successful completion of a background investigation, including criminal history and identity checks. The annual salary range is $200,000–$220,000, depending on the role and responsibilities, experience, qualifications, education or training, and skills.

Requirements

Bachelor's or Master's degree in Computer Science or a related field.
10+ years of cybersecurity experience.
6+ years of experience within a DoD environment.
CISSP or CISSM certification required.
Active Top Secret security clearance.
U.S. citizenship required.
Successful completion of a background investigation, including criminal history and identity checks, is required.

Responsibilities

Apply in-depth knowledge of Risk Management Framework (RMF) requirements and system authorizations.
Map RMF security controls to the technologies and tools used within each system.
Identify security gaps and recommend technical solutions to reduce risk.
Use SIEM/SOAR tools, such as Splunk, to monitor system security.
Build dashboards to track threats, system activity, and security events.
Configure alerts to support Security Operations Center (SOC) monitoring.
Analyze audit, security, and application logs to investigate suspicious activity and support incident response.
Monitor systems for potential attacks, intrusions, unusual activity, and unauthorized use.
Distinguish actual threats from normal system activity.
Investigate malicious activity to determine how systems were compromised, which vulnerabilities were exploited, and the potential impact.
Correlate security events from multiple enterprise sources to understand attack activity, identify patterns, and assess potential threats.
Identify and test system and network vulnerabilities through penetration testing, red teaming, and ethical hacking.
Develop and implement cybersecurity solutions for cloud-based systems, devices, and networks.
Apply advanced technical expertise in network exploitation, malware development, and reverse engineering to assess threats and system vulnerabilities.
Prepare and deliver technical cybersecurity briefings and recommendations to senior DAF cybersecurity leadership.
Support threat investigations, take ownership of assigned cybersecurity activities, and brief program leadership on findings and potential improvements.
Perform other duties as assigned.