Principal Cybersecurity Engineer

McBride International; Massachusetts; Hybrid; USD 140,000 - 200,000; Full time

Benefits offered by this job

401(k)

Dentalinsurance

Healthinsurance

Life insurance

Paid time off

Referralprogram

Job summary

McBride Consulting is hiring a Principal Cybersecurity Engineer to support AFLCMC ESG at Hanscom AFB. The role centers on RMF-based security, risk analysis, and program security across DoD networks and C2ISR environments.

You will lead system security documentation, manage RMF activities, and collaborate with government and industry partners to obtain RMF approvals and maintain mission protection.

Qualifications

• Citizenship: US citizen and ability to maintain Top Secret clearance.
• Education: BS/BA Degree required; DoD RMF experience preferred.
• 20 years of related experience, 10 years in the DoD; strong RMF background.

Responsibilities

• Lead development and review of security documentation per RMF and DoD standards.
• Support A&A activities under RMF, including ATO/ATC and continuous monitoring.
• Administer eMASS packages and oversee vulnerability management processes.
• Provide cybersecurity architecture leadership for DoD networking environments.
• Assess vulnerabilities, configure mitigations, and advise leadership on risks.

Skills

RMF

Vulnerability Management

STIGs

CISSP Certification

Education

BS/BA Degree

Tools

Nessus ACAS

Cross Domain Solutions

Job description

Hanscom Afb, United States | Posted on 09/21/2026

McBride is a certified Minority-Owned Business Enterprise (MBE), Service-Disabled Veteran-Owned Small Business (SDVOSB), and Disadvantaged Business Enterprise (DBE) management and IT consulting firm with significant professional services experience that includes IT transformation, project management, digital transformation, strategic planning, business process improvement, change management, human capital management, disaster recovery, and operations.

Job Description

McBride Consulting has an exciting opportunity for a Principal Cybersecurity Engineer providing support to the Air Force Life Cycle Management Center-Ground Base Air Defense Sensor division (AFLCMC/ESG).

The ESG Division manages efforts focused on developing, acquiring, fielding and sustaining programs that support worldwide communications, Battle Management, Command & Control, Intelligence, Surveillance & Reconnaissance (C2ISR), Air/Ground Surveillance, Time Critical Targeting, Combat Identification, Radar Imagery, Integrated Air/Missile Defense, and Mobile/Fixed C2ISR Performance, Exploitation & Dissemination Facilities.

This is a full-time position located at Hanscom Air Force Base in Bedford, Massachusetts.

Duties include, but not limited to:

Cybersecurity & RMF Support

Lead development and review of system security documentation including System Security Management Plans, Program Protection Plans, Security Risk Analyses, OPSEC Plans, and security CONOPS in accordance with DoDI 5000.02, DoDI 8510.01, MIL-STD-1785, and the Adaptive Acquisition Framework

Support system and application Authorization & Accreditation (A&A) activities under the Risk Management Framework (RMF), ensuring completeness, quality, and compliance of all artifacts

Manage RMF implementation activities including ATO/ATC, reciprocity, and ongoing continuous monitoring

Administer and manage eMASS system packages

System, Network & Infrastructure Security

Provide technical leadership in network and system architecture design with an emphasis on cybersecurity, including DoD and joint networking environments

Support cross-domain solutions (CDS), Commercial Solutions for Classified (CSfC), and NSA approval processes

Assess and mitigate system, network, and application vulnerabilities, including ACAS scanning and STIG implementation

Recommend security configurations, software changes, and compensating controls to mitigate risk

Risk, Compliance & Policy

Conduct cybersecurity risk and vulnerability assessments across planned and fielded systems

Develop risk-based mitigation strategies and advise leadership on security tradeoffs impacting mission execution

Recommend and update cybersecurity policies, procedures, and contingency plans, including disaster recovery

Support waivers and deviations for mandated security controls when required to meet mission performance needs

Program Security & Classified Information Support

Provide acquisition program security support throughout the system lifecycle, including source selections

Maintain and audit classified information databases, visit records, clearance tracking, and classified holdings

Evaluate contractor classified data submissions for compliance with System Security Classification Guides (SSCGs)

Update security classification guides and prepare acquisition security documentation

• Advise government leadership on cybersecurity design, implementation, and compliance
• Collaborate with government and commercial stakeholders to achieve RMF authorization approvals
• Develop and deliver cybersecurity awareness and training programs

Requirements

Citizenship: Must be a US citizen

Minimum Required Qualifications

Clearance:Must have a be able to maintain a Top Secret Level Clearance

Education:BS/BA Degree

Years of Experience:20 years of directly related experience, 10 years of which must be in the DoD

• Risk Management Framework (RMF), with emphasis on taking projects from Step 1 to Step 5
• Vulnerability Management, Tenable Nessus (ACAS-DoD version of Nessus)
• STIGs
• CISSP Certification

Preferred Qualifications

• Experience with Cross Domain Solutions and USAF CDS-E
• Supply Chain Security
• NIAP
• DoD Policies for Procedures for Cybersecurity
• Network Security
• NSA Type 1 encryption
• Working with a CSSP - 16th AF

Additional Information:

Location: Hanscom Air Force Base

Onsite

• 401(k)
• Dentalinsurance
• Healthinsurance
• Life insurance
• Paid time off
• Referralprogram

Our people and culture

McBride is an Equal Opportunity Employer. McBride Consulting does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need.