Cybersecurity Engineer

Craig Technical Consulting, Inc.; Manassas (VA); On-site; USD 110,000 - 175,000; Full time

Job summary

Craig Technologies is hiring a Cybersecurity Engineer to design and implement security controls across Linux, Windows, cloud, and network environments in Manassas, VA. The role requires an active Secret clearance and strong MBSE experience.

You will develop automation tools in Python/C/C++, perform risk analysis, and present security findings to leadership. Onsite work is required with a focus on cybersecurity solutions, agile practices, and collaboration with multiple teams and stakeholders.

Qualifications

• Bachelor’s degree in Cybersecurity, CS, or related IT field with 3 years of relevant experience or 7 years total.
• Experience with Linux systems and large system development.
• Experience with basic networking switch/router/firewall/IDS concepts.
• Experience developing Cyber Security Solutions as a team.

Responsibilities

• Design, implement, and maintain security controls and policies across Linux, Windows, cloud, containers, and network devices.
• Integrate secure configuration tools and processes for Linux and Windows environments.
• Perform security assessments and validate configurations through automated testing and tailored solutions.
• Develop automation scripts, security tools, and test use cases using Python, C, C++, or Rust.
• Create and understand MBSE artifacts that capture security requirements, threat models, and mitigation strategies.
• Research new Cybersecurity capabilities, perform risk analysis, develop mitigations, and integrate lessons learned.
• Create artifacts for dissemination and provide actionable recommendations for peers and leadership.
• Present and lead discussions with teams to align security objectives across stakeholders.
• Follow agile methodologies (Jira/Confluence) and maintain up-to-date security documentation and test plans.

Skills

Linux

Networking concepts

Python

C

C++

Rust

MBSE concepts

Cybersecurity solutions teamwork

Education

Bachelor’s degree in Cybersecurity, CS, or related IT field

Master’s degree +2 years cyber experience

7 years relevant experience option

Tools

Jira

Confluence

Job description

Title:Cybersecurity Engineer
Location:Manassas, VA

Clearance: ActiveSecret Clearance Required
Citizenship Requirement:US Citizenship is required.
Req #: 4079

Summary:

Craig Technologies has an opening for a Cybersecurity Engineer supporting the work on the Submarine Command, Control, Communication Computers, Cyber-Defense & Intelligence contract supporting Systems Engineering & Intelligence. This work is located onsite in Manassas, Virginia.

An active Secret clearance is a requirement for this position.

Detailed Description:

• Design, implement, and maintain security controls and policies across multiple domains (Linux, Windows, cloud, containers, network devices)
• Integrate secure configuration tools and processes for Linux and Windows environments
• Perform security assessments and validate configurations through automated testing and tailored solutions
• Develop automation scripts, security tools, and test use cases using Python, C, C++, or Rust
• Create and understand MBSE artifacts (SysML diagrams, requirements traceability matrices, interface control documents) that capture security requirements, threat models, and mitigation strategies
• Research new Cybersecurity capabilities, complete trade‑studies, perform risk analysis, develop unconventional mitigations, and continuously integrate lessons learned and emerging knowledge into the program
• Create clear and concise artifacts (presentations, whitepapers, etc.) for dissemination and provide actionable recommendations for peers, leadership, and customers
• Present and lead discussions with various teams (working groups, technical exchange meetings, subsystems discussions) to ensure alignment of security objectives across all stakeholder groups
• Follow agile methodologies for task tracking (Jira - backlog, risk tracking, defect management) and maintain up‑to‑date security documentation & test plans (Confluence - create, organize, and collaborate on documentation)

Basic Qualifications:

• Bachelor’s degree in Cybersecurity, Computer Science, Computer Engineering, or related engineering or IT field with 3 years of relevant experience or master’s degree and 2+ years of relevant cyber experience; Or 7 years of relevant experience.
• Experience with Linux systems and large system development
• Experience with basic networking switch/router/firewall/IDS concepts
• Experience developing Cyber Security Solutions (in any form) as a team

Desired Skills:

• Knowledge of containers and securing the infrastructure through the cloud
  Experience in agile methodologies that highlight Atlassian tools, namely Jira and Confluence
• Experience in model-based system engineering concepts (MBSE)
• Experience in researching new Cybersecurity capabilities, performing trade studies, and providing expertise to peers and leadership.
• Proficiency with Cyber best practice security concepts, models, and methods, (e.g., zero trust architecture and maturity model, advanced authentication methods, STIG coding practices)
• Ability to communicate and work effectively with internal members and external customers
• Creative thinker with strong analytical, problem-solving skills, and a continuous learning mindset
• Linux experience in scripting and/or development, e.g. Python, C, C++, Rust
• Strong communication and leadership skills to engage internal teams and external stakeholders
• Possess (or must obtain within 6 months of hiring) an approved DoD 8570 baseline certification for IAT Level II (Security+, GSEC, etc.)

Task List:

• Design, implement, and maintain security controls and policies across multiple domains (Linux, Windows, cloud, containers, network devices)
• Integrate secure configuration tools and processes for Linux and Windows environments
• Perform security assessments and validate configurations through automated testing and tailored solutions
• Develop automation scripts, security tools, and test use cases using Python, C, C++, or Rust
• Create and understand MBSE artifacts (SysML diagrams, requirements traceability matrices, interface control documents) that capture security requirements, threat models, and mitigation strategies
• Research new Cybersecurity capabilities, complete trade‑studies, perform risk analysis, develop unconventional mitigations, and continuously integrate lessons learned and emerging knowledge into the program
• Create clear and concise artifacts (presentations, whitepapers, etc.) for dissemination and provide actionable recommendations for peers, leadership, and customers
• Present and lead discussions with various teams (working groups, technical exchange meetings, subsystems discussions) to ensure alignment of security objectives across all stakeholder groups
• Follow agile methodologies for task tracking (Jira - backlog, risk tracking, defect management) and maintain up‑to‑date security documentation & test plans (Confluence - create, organize, and collaborate on documentation)

The salary range for this role is $110,000 - $175,000; however, Craig Technologies considers several factors when extending an offer for employment, including but not limited to, the role and associated responsibilities, a candidate’s work experience, education/training and preferred skills and knowledge.

Note: This job description describes the general nature of the duties and requirements of the job. It is not intended to be an exhaustive list or to limit the supervisor's ability to modify work assignments as appropriate.

***All candidates selected will be subject to a security background investigation and must meet all eligibility requirements for access to classified information. ***

Craig Technologies is an EEO Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, or any other non-job-related protected status. All candidates selected will be subject to a security background investigation and must meet all eligibility requirements for access to classified information.