Journeyman Cybersecurity Engineer

Astrion; Lincoln (MA); On-site; USD 120,000 - 130,000; Full time

Job summary

Astrion seeks a Journeyman Cybersecurity Engineer (ISSM) for Hanscom AFB, Bedford, MA, to support the C3C/Kessel Run division. This full-time role requires U.S. citizenship, a Secret clearance, and a Bachelor’s degree in a related technical field.

The ideal candidate has 5+ years RMF experience under NIST SP 800-53, IAM Level III certification, and hands-on ACAS/Nessus work. Proficiency with Windows and Linux, strong analytical skills, and clear written and verbal communication are essential.

Qualifications

• Must be a US citizen.
• Secret clearance required.
• Bachelor’s degree in a related technical field.
• 5+ years of dedicated DOW cybersecurity experience executing RMF under NIST SP 800-53.

Responsibilities

• Lead the A&A process to obtain and maintain the system's ATO using eMASS.
• Oversee continuous monitoring, vulnerability scanning with Nessus, and DISA STIG hardening across multi-classification networks.
• Manage security incident reporting, perform root-cause analysis, and develop corrective action plans / POA&Ms.
• Ensure cybersecurity is integrated throughout the lifecycle of the AOC Weapon System as per DoDI 8510.01.
• Ensure all DoD IT cybersecurity documentation is current and accessible to properly authorized individuals.
• Coordinate ISCM strategy with PM and AO staffs and monitor changes to the system environment.
• Continuously monitor IT for security-relevant events and assess changes for impact on posture.

Skills

RMF

NIST SP 800-53

IAM Level III Certification

Windows & Linux

Analytical skills

Communication skills

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

ACAS (Nessus)

SecurityCenter/Tenable.sc

Nessus Network Monitor

Job description

Overview

Journeyman Cybersecurity Engineer (ISSM)

LOCATION:Hanscom AFB, Bedford, MA

SALARY RANGE: $120,000.00 - $130,000.00 Annually

JOB STATUS:Full-time

CLEARANCE: Secret

CERTIFICATION:IAM Level III Certification

TRAVEL:Limited; as needed

Astrion has an exciting opportunity for a Journeyman Cybersecurity Engineer located at the Hanscom AFB in Bedford, MAproviding support to the Command, Control, Communications (C3C)/Kessel Run division.

Kessel Run is an Air Force unit that delivers resilient command and control and targeting software capabilities that provide warfighters with decision advantage. Under the Department of the Air Force Program Executive Office for Command, Control, Communication, and Battle Management (DAF PEO C3BM), Kessel Run technologies make up the DAF BATTLE NETWORK, the systems-of-systems designed to help the Joint Force make operational decisions faster than our adversaries. The Division architects and acquires the means to connect weapon systems with warfighters and decision makers to enable the warfighter to win against the pacing challenge in an era of great power competition.

REQUIRED QUALIFICATIONS / SKILLS:

• Must be a US citizen
• Clearance:Must have and be able to maintain a Secret Level Clearance
• Education:Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related technical field
• Years of Experience:5+ years of dedicated DOW cybersecurity experience executing RMF under NIST SP 800-53
  • IAM Level III Certification (Certified Information Systems Security Professional / Certified Information Security Officer)
  • Basic understanding of networking concepts and protocols.
  • Familiarity with Windows and Linux operating systems.
  • Strong analytical and problem-solving skills.
  • Excellent written and verbal communication skills

PREFERRED QUALIFICATIONS / SKILLS:

• Experience with the Tenable ACAS suite (Nessus, Security Center/Tenable.sc, NNM/Tenable.asm).
• Security+ or other relevant cybersecurity certifications.
• Experience with scripting languages such as Python or PowerShell.
• Familiarity with DoD security policies and procedures

RESPONSIBILITIES:

Primary cybersecurity advisor to the Program Manager and Authorizing Official (AO) charged with securing and accrediting the AOC weapon system, which orchestrates global air operations. This role bridges the gap between traditional RMF compliance and modern, continuous DevSecOps pipeline security

• Lead the Assessment & Authorization (A&A) process to obtain and maintain the system's Authorization to Operate (ATO) using the Enterprise Mission Assurance Support Service (eMASS)
• Oversee continuous monitoring (ConMon) strategies, vulnerability scanning (using ACAS/Nessus), and configuration hardening (DISA STIGs) across multi-classification networks
• Manage security incident reporting, perform root-cause analysis, and develop corrective action plans / POA&Ms
• Ensures the integration of cybersecurity into, and throughout the lifecycle of the Air Operations Center (AOC) Weapon System, on behalf of the AO and in accordance with DoDI 8510.01
• Completes and maintains required cybersecurity certification IAW AFMAN17-1303. Individuals in this position must be U.S. citizens
• Ensures all AF IT cybersecurity-related documentation is current and accessible to properly authorized individuals. AFI17-101 6 FEBRUARY 2020 15
• Supports the PM or ISO in maintaining current authorization to operate, and approval to connect and in implementing corrective actions identified in the plan of action and milestones
• Coordinates, with the PM and AO staffs, development of an ISCM strategy and monitor any proposed or actual changes to the system and its environment
• Continuously monitors the IT and environment for security-relevant events, assess proposed configuration changes for potential impact to the cybersecurity posture, and assess the quality of security controls implementation against performance indicators
• Ensures cybersecurity-related events or configuration changes that impact AF IT authorization or adversely impact the security posture are formally reported to the AO and other affected parties, such as IOs and stewards and AOs of interconnected IT
• Ensures the AF IT is acquired, documented, operated, used, maintained, and disposed of properly and IAW DoDI 5000.02 and DoDI 8510.01
• Process Firewall Exemption Requests (FERs)
• Approve change requests (i.e.: Critical Security Updates)
• Assist with the installation, configuration, and maintenance of ACAS components, including Nessus scanners, SecurityCenter/Tenable.sc, and Nessus Network Monitor (NNM)/Tenable.asm.
• Assist in scheduling and executing vulnerability scans using Nessus scanners.
• Analyze scan results to identify vulnerabilities, and misconfigurations.
• Assist with compliance assessments against DoW standards and internal security policies.
• Generate reports on vulnerability status, compliance posture, and remediation progress.
• Collaborate with system administrators to facilitate vulnerability remediation efforts.
• Assist with system administration tasks for ACAS servers and databases.
• Stay up to date on the latest vulnerability trends and security threats.