Cybersecurity Engineer
OCH Technologies, LLC
Get more replies from employers
Send a job-specific resume in minutes.
Benefits offered by this job
Job summary
OCH Technologies, LLC is seeking a Cybersecurity Engineer to design and maintain sandbox and simulation environments for pen testing, red/blue team exercises, and equipment evaluations. You will administer Nessus/WebInspect, evaluate FAA-related cybersecurity requirements, and build documented evaluation reports.
You will support NAS device assessments, tool adoption decisions, and on-site testing events, traveling up to 25% as needed.
Qualifications
- Eight or more years in cybersecurity engineering or related roles.
- length<=140
- Hands-on with vulnerability scanning systems.
- Experience building isolated test and simulation environments.
- Knowledge of network security architectures and firewalls.
- Experience evaluating tools and producing technical reports.
- Scripting (Python, Bash, PowerShell) for automation.
Responsibilities
- Design and maintain sandboxing and simulation environments for testing.
- Maintain vulnerability scanning infrastructure like Nessus and WebInspect.
- Test equipment against FAA requirements and evaluate NAS devices.
- Gather requirements and write evaluation reports.
- Identify and evaluate new cybersecurity tools for adoption.
- Coordinate scanning schedules and prepare technical documentation.
- Support on-site assessment events and tool deployment.
- Assist Lead with monitoring and detection rule development.
Skills
Education
Tools
Job description
OCH Technologies is seeking a Cybersecurity Engineer to support the assessment and operations teams by maintaining scanning infrastructure, building and managing sandboxing and simulation test environments, evaluating new cybersecurity tools for FAA approval, and performing specialized testing of equipment against FAA performance and cybersecurity requirements. This role is the technical backbone that keeps the assessment and pen testing teams productive. Candidate will support building the environments they test in, maintain the tools they test with, and evaluate the equipment the FAA is considering adding to its approved list. This position supports a proposal effort and is contingent upon award, customer approval, and successful onboarding requirements.
Hybrid- William J. Hughes Technical Center (WJHTC) Egg Harbor, NJ or Air Traffic Control System Command Center (ATCSCC) Washington, DC. This position has the potential to travel up to 25%.
- Design, prepare, and maintain sandboxing and simulation test environments for penetration testing, red/blue team exercises, and specialized equipment evaluations.
- Maintain and administer vulnerability scanning infrastructure including Nessus, WebInspect, and related platforms.
- Perform specialized testing and evaluation of industry equipment (switches, firewalls, KVMs, TAPs, data diodes, Palo Alto appliances) against FAA and ATO cybersecurity requirements.
- Evaluate NAS edge devices being considered for deployment by NAS system owners. Gather requirements, conduct assessments, and produce written evaluation reports.
- Identify and evaluate emerging cybersecurity tools and technologies for potential adoption. Conduct risk analysis considering operational safety impact, data handling, supply chain risk, and integration complexity.
- Support pre- and post-scan activities for NAS systems. Coordinate scanning schedules with system owners.
- Develop and maintain technical documentation for test environments, tool configurations, and standard operating procedures.
- Support the NCO Technical Lead with monitoring tool deployment, log source integration, and detection rule development as needed.
- Provide technical support during on-site assessment and penetration testing events as needed.
Responsibilities may evolve over time to support team and organizational goals but will remain consistent with the overall scope of the role.
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Mathematics, or Physics from an accredited institution.
- A minimum of eight (8)+ years of experience in cybersecurity engineering, security operations engineering, or related technical roles in federal or critical infrastructure environments. At least 2 years of relevant experience must be recent (performed within the last 3 years).
- Hands‑on experience administering and configuring vulnerability scanning platforms (Nessus, WebInspect, or equivalents).
- Experience building and managing isolated test and simulation environments.
- Understanding of network architecture, firewall configuration, IDS/IPS deployment, and network segmentation.
- Experience evaluating cybersecurity tools and equipment against security requirements and producing written technical evaluations.
- Scripting/automation skills (Python, Bash, PowerShell) for tool integration, data processing, and workflow automation.
Candidate must have the ability to obtain and maintain a Public Trust
- At least one of the following risk assessment certifications required: CISSP, GCED (GIAC Certified Enterprise Defender), CASP (CompTIA Advanced Security Practitioner), or CISA (Certified Information Systems Auditor).
- Vendor‑specific certifications (Palo Alto PCNSE, Cisco CCNP Security) a plus for specialized equipment evaluation work.
- Understanding of NAS or critical infrastructure network architectures.
- Prior experience at WJHTC or other FAA test facilities.
- Experience with ICs/SCADA security tooling and assessment.
- Experience with container-based or virtualized test environment management.
- Familiarity with FAA-approved equipment lists and the ACG equipment evaluation process.
- Infrastructure-as-code (Terraform, Ansible) for repeatable, version-controlled test environment builds rather than manual standup.
- Container orchestration (Docker, Kubernetes) for building isolated, reproducible sandbox and simulation environments for red/blue team exercises.
- CI/CD pipeline security tooling (CodeQL, Semgrep, Trivy) for evaluating software supply chain risk in candidate NAS equipment and applications.
- AI/ML model evaluation tools for assessing the security posture of AI-enabled systems being introduced into NAS infrastructure.
At OCH, we are more than just a government contracting firm; we are innovators and leaders in providing cutting‑edge IT services and cybersecurity solutions. Driven by a set of fundamental values, we excel in creating secure, efficient, and forward‑thinking solutions that empower the government agencies we work with. Our commitment to maintaining the highest standards of integrity, adapting swiftly to new challenges, and focusing on the people we serve ensures that we consistently exceed expectations and lead the industry in innovation and reliability.
- Integrity - We act with unwavering honesty, ensuring every decision is rooted ethically.
- Adaptable - We swiftly adapt to changes, seizing opportunities to innovate and lead.
- People‑Focused - We prioritize relationships, championing growth and mutual success.
- Accountable - We own our outcomes, striving for excellence through continuous improvement.
- Collaborative - We cultivate teamwork, harnessing diverse talents to forge groundbreaking solutions.
Step into a role at OCH where your contributions make a tangible impact. Join a team that values creativity and initiative, offering a platform to transform the landscape of government IT services. Here, your work is not just a career—it's a mission. Embrace the opportunity to grow, innovate, and excel alongside industry leaders who are as passionate about technology as they are about making a difference.
- Paid time off and Holidays
- Medical, Dental, and Vision Insurance
- Paid Parental Leave
- Short‑term disability, long‑term disability, and life insurance - Employer Paid!
- 401(k)
- Additional Voluntary Life Insurance
- Tuition Reimbursement
& More!
E-Verify Participation: OCH Technologies, LLC is a participant of E-Verify to verify the identity and employment eligibility of newly hired employees.
At OCH Technologies, we deeply respect and appreciate the unique skills and experiences that veterans bring to our team. As a federal contractor, we encourage qualified veterans to apply and provide preference where permitted by law. Your service and dedication are valued here. We are committed to creating a workplace that is open, welcoming, and accessible to everyone. In accordance with the Americans with Disabilities Act (ADA) and Section 503 of the Rehabilitation Act, we provide reasonable accommodations throughout the hiring process to ensure individuals with disabilities can apply without barriers. If you need assistance or an accommodation, please contact us at hiring@ochtec.com.
OCH Technologies, LLC is proud to be an equal opportunity employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, disability, gender identity, or any other protected characteristic as outlined by federal, state, or local laws.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
