Cybersecurity Engineer Senior with Security Clearance

ASD; Bellevue Second IV Precinct (NE); On-site; USD 120,000 - 180,000; Full time

Job summary

GDIT is seeking a cybersecurity engineer to support USSTRATCOM from Offutt AFB, NE, delivering secure architectures and 24/7 IT services. You will translate mission objectives into security requirements, participate in design reviews, and develop security artifacts.

The role requires 5+ years in cybersecurity engineering or related fields, a BA/BS, and active Top Secret clearance with ability to obtain TS/SCI. CISSP/CEH/GIAC or equivalent credentials are preferred.

Qualifications

• Current Top Secret clearance with the ability to obtain TS/SCI
• BA/BS or equiv and 5+ years in cybersecurity engineering, information assurance, or security architecture
• Experience with systems security engineering practices and threat modeling
• Knowledge of NIST risk management and security-control frameworks and enterprise security architectures

Responsibilities

• Translate mission objectives, operational needs, threats, and policy requirements into measurable system security requirements and engineering specifications
• Participate in systems engineering technical reviews, including requirement analysis and design reviews
• Integrate cybersecurity requirements throughout the system life cycle
• Evaluate system designs for security, resilience, reliability, maintainability, interoperability, and operational supportability
• Develop and maintain cybersecurity artifacts including system security plans and risk assessments
• Define security architecture patterns for identity and access management, encryption, and network segmentation
• Design safeguards for data in transit, at rest, and in use
• Conduct threat modeling, attack-surface analysis, and risk assessments
• Demonstrate strong problem solving, communication, and documentation skills
• Experience designing secure architectures for enterprise systems and cloud platforms

Skills

Security engineering

Information assurance

Security architecture

Cloud security

DevSecOps

Secure coding

Threat modeling

Risk assessment

Communication

Documentation

Education

BA/BS or equiv

Tools

Splunk

Nessus

Wireshark

Nmap

SysML

UML

AWS/Azure/GCP security suites

Terraform

Job description

Meaningful Work And Personal Impact

The work you'll do at GDIT will be impactful to the mission of USSTRATCOM. USSTRATCOM is a Combatant Command responsible for strategic deterrence, nuclear operations, and enterprise IT services essential to national security. It oversees Nuclear Command, Control, and Communications (NC3), Joint Electromagnetic Spectrum Operations (JEMSO), Global Strike, and Missile Threat Assessments, working closely with other Combatant Commands, Services, and defense agencies. SCITLS will be a key component that will ensure mission success and the safety of the U.S. and its allies by providing 24/7 IT services and network support for NIPRNet, SIPRNet, JWICS, and SAP/SAR environment. You will play a crucial role in providing support in the following areas:

• Translate mission objectives, operational needs, threats, and policy requirements into measurable system security requirements and engineering specifications
• Participate in systems engineering technical reviews, including system requirements reviews, preliminary design reviews, solution design document reviews, test readiness reviews, and operational readiness reviews
• Integrate cybersecurity requirements throughout the system life cycle, including concept development, requirement analysis, architecture design, integration, verification, validation, deployment, sustainment, and disposal
• Evaluate system designs for security, resilience, reliability, maintainability, interoperability, scalability, and operational supportability
• Develop or review system architecture products, including operational views, logical and physical architecture diagrams, data-flow diagrams, trust-boundary, network diagrams, interface control documents, and deployment diagrams
• Develop and maintain cybersecurity artifacts, including system security plans, security control implementation statements, architecture diagrams, risk assessments, remediation plans, contingency plans, and security test documentation
• Define security architecture patterns for identity and access management, privileged access, encryption, key management, network segmentation, endpoint protection, logging, monitoring, backup, recovery, and remote access
• Design or recommend technical safeguards that protect data in transit, at rest, and in use, consistent with mission and system requirements
• Conduct or support threat modeling, attack-surface analysis, misuse-case development, and engineering risk assessments
• Strong technical background in system security, network security, cryptography, secure architectures, firewalls, and DevSecOps environments
• Proficiency in programming languages such as Java, C++, and Python, with hands on experience in secure coding and automation
• Familiarity with cloud security (AWS, Azure, GCP), virtualization, identity management, and security compliance frameworks
• Industry certifications such as CISSP-ISSEP and ASEP, GIAC, GCIH, CEH, or other advanced cybersecurity credentials
• Demonstrated strength in problem solving, communication, documentation, and attention to detail
• Experience designing secure architectures for enterprise systems, applications, and cloud platforms

What You'll Need to Succeed

Education: BA/BS (or equivalent experience).

Required Certifications: ITIL Foundations v4 Certificate or the ability to obtain within 9 mos

Must have a current/active Top Secret clearance with the ability to obtain TS/SCI status

Location: Offutt AFB, NE

Experience: 5+ years of cybersecurity engineering, information assurance, or security architecture experience.

Certifications such as CISSP, GIAC, CEH, or equivalent advanced cybersecurity credentials.

Preferred Qualifications

• Experience with systems engineering and systems security engineering practices
• Ability to develop and analyze system, subsystem, interface, and security requirements
• Strong communication, documentation, analytical skills, and attention to detail. Knowledge of systems engineering life-cycle processes, including requirements decomposition, functional analysis, design synthesis, integration, verification, validation, and configuration management
• Knowledge of security architecture principles, including: defense in depth, Zero Trust architecture, Identity, credential, and access management (ICAM), network segmentation and boundary protection, key management, secure configuration and system hardening
• Experience with model-based systems engineering tools or methods, such as SysML, UML, architecture modeling, or digital engineering environments
• Experience with enterprise architecture frameworks or Department of War architecture approaches
• Experience with risk management and security engineering standards, such as NIST risk management and security-control frameworks
• Experience with cyber forensics, intrusion detection, threat analysis, and incident response.
• Strong background in system/network security, encryption algorithms, cryptography, identity management, and secure architectures.
• Proficiency with tools such as Splunk, Nessus, Wireshark, Nmap, AWS/Azure/GCP security suites, and vulnerability management platforms.
• Knowledge of secure programming in Java, C++, Python, and automation for security workflows.
• Ability to communicate complex technical architecture and cybersecurity issues to engineers, program managers, system owners, and senior leaders.
• Ability to develop clear technical documentation, diagrams, briefings, decision papers, and engineering recommendations.
• Ability to work effectively across engineering, cybersecurity, operations, acquisition, testing, and sustainment organizations.
• Ability to manage competing priorities while maintaining technical rigor, traceability, and configuration discipline.
• Familiarity with DevSecOps practices, virtualized environments, cloud security frameworks, and infrastructure-as-code (Terraform).
• Certifications such as CISSP, CISSP-ISSEP, CISSP-ISSAP, INCOSE ASEP, GIAC, CEH.