Cybersecurity Engineer — ATO/DevSecOps for AOC

Astrion; Lincoln (MA); On-site; USD 120,000 - 130,000; Full time

Job summary

Astrion seeks a Journeyman Cybersecurity Engineer (ISSM) for Hanscom AFB, Bedford, MA, to support the C3C/Kessel Run division. This full-time role requires U.S. citizenship, a Secret clearance, and a Bachelor’s degree in a related technical field.

The ideal candidate has 5+ years RMF experience under NIST SP 800-53, IAM Level III certification, and hands-on ACAS/Nessus work. Proficiency with Windows and Linux, strong analytical skills, and clear written and verbal communication are essential.

Qualifications

• Must be a US citizen.
• Secret clearance required.
• Bachelor’s degree in a related technical field.
• 5+ years of dedicated DOW cybersecurity experience executing RMF under NIST SP 800-53.

Responsibilities

• Lead the A&A process to obtain and maintain the system's ATO using eMASS.
• Oversee continuous monitoring, vulnerability scanning with Nessus, and DISA STIG hardening across multi-classification networks.
• Manage security incident reporting, perform root-cause analysis, and develop corrective action plans / POA&Ms.
• Ensure cybersecurity is integrated throughout the lifecycle of the AOC Weapon System as per DoDI 8510.01.
• Ensure all DoD IT cybersecurity documentation is current and accessible to properly authorized individuals.
• Coordinate ISCM strategy with PM and AO staffs and monitor changes to the system environment.
• Continuously monitor IT for security-relevant events and assess changes for impact on posture.

Skills

RMF

NIST SP 800-53

IAM Level III Certification

Windows & Linux

Analytical skills

Communication skills

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

ACAS (Nessus)

SecurityCenter/Tenable.sc

Nessus Network Monitor

Job description

Astrion seeks a Journeyman Cybersecurity Engineer (ISSM) for Hanscom AFB, Bedford, MA, to support the C3C/Kessel Run division. This full-time role requires U.S. citizenship, a Secret clearance, and a Bachelor’s degree in a related technical field.

The ideal candidate has 5+ years RMF experience under NIST SP 800-53, IAM Level III certification, and hands-on ACAS/Nessus work. Proficiency with Windows and Linux, strong analytical skills, and clear written and verbal communication are essential.