Principal Cybersecurity Engineer

Sabre Systems; Patuxent Highland (MD); Hybrid; USD 160,000 - 190,000; Full time

Job summary

Sabre Systems seeks a Principal Cybersecurity Engineer to provide senior‑level ISSE support for a federal cybersecurity program operating under the RMF. You will guide cybersecurity architecture, compliance, threat analysis, and continuous monitoring while delivering high‑quality documentation and executive‑level deliverables.

The role requires advanced engineering expertise in information systems, OT, and hybrid cyber‑physical platforms, with hybrid work in the NCR and on-site presence for

Qualifications

• Nine years of progressive cybersecurity engineering/ISSE experience.
• Experience executing the RMF lifecycle with control implementation, assessment, and monitoring.
• Active DoD Secret Clearance or higher; U.S. citizen.

Responsibilities

• Serve as the lead ISSE for assigned information systems, OT environments, and hybrid cyber-physical platforms.
• Lead or support the full RMF lifecycle—from categorization and control selection through assessment, authorization, continuous monitoring, and decommissioning.
• Develop, update, and maintain RMF documentation in eMASS, including SSPs, SCTMs, POA&Ms, SARs, contingency/incident response plans, risk analyses, inventories, diagrams, and data flows.
• Conduct Security Readiness Reviews; analyze ACAS/Nessus data; validate remediation and coordinate DISA ticket actions.
• Support ongoing compliance with DoD, DHS, USCG, and DISA STIG requirements; contribute to cATO efforts, automated evidence gathering, and dashboard integration.
• Perform Security Impact Assessments and participate in engineering reviews, change control boards, acquisition milestones, and technical working groups.
• Integrate Zero Trust principles, RMF control requirements, and OT/ICS security considerations into system engineering and architecture.
• Evaluate cyber threats, adversary TTPs, OT/ICS vulnerabilities, and supply-chain risks; recommend mitigation strategies and system hardening approaches.
• Track compliance with authoritative orders (OPORDs, TASKORDs, FRAGOs, ALCOASTs, TCTOs).
• Produce cybersecurity readiness updates, briefings, metrics, and risk memorandums; respond to Government data calls as needed.
• Provide mentorship and technical leadership to junior cybersecurity team members and provide recommendations to improve processes and contract operations.

Skills

ISSE leadership

RMF lifecycle

Threat analysis

Executive briefings

Cybersecurity engineering

Communication

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering

Tools

eMASS

ACAS/Nessus

HBSS

Tanium

Elastic SIEM

Splunk

ServiceNow

Burp Suite

Job description

Responsibilities

Sabre Systems seeking a Principal Cybersecurity Engineer to provide senior‑level Information System Security Engineering (ISSE) support for a federal cybersecurity program operating under the Risk Management Framework (RMF). This role requires advanced engineering expertise and includes advisory duties supporting federal information systems, operational technology (OT), and hybrid cyber-physical platforms. The Principal Cybersecurity Engineer will guide cybersecurity architecture, compliance, threat analysis, and continuous monitoring while producing high‑quality documentation and executive‑level deliverables.

Work Environment & Additional Requirements

• Location: Hybrid – National Capital Region
• Hybrid work with on‑site presence required for classified work
• Occasional CONUS travel

Key Responsibilities

• Serve as the lead ISSE for assigned information systems, OT environments, and hybrid cyber‑physical platforms.
• Lead or support the full RMF lifecycle—from categorization and control selection through assessment, authorization, continuous monitoring, and decommissioning.
• Develop, update, and maintain RMF documentation in eMASS, including SSPs, SCTMs, POA&Ms, SARs, contingency/incident response plans, risk analyses, inventories, diagrams, and data flows.
• Conduct Security Readiness Reviews; analyze ACAS/Nessus data; validate remediation and coordinate DISA ticket actions.
• Support ongoing compliance with DoD, DHS, USCG, and DISA STIG requirements; contribute to cATO efforts, automated evidence gathering, and dashboard integration.
• Perform Security Impact Assessments and participate in engineering reviews, change control boards, acquisition milestones, and technical working groups.
• Integrate Zero Trust principles, RMF control requirements, and OT/ICS security considerations into system engineering and architecture.
• Evaluate cyber threats, adversary TTPs, OT/ICS vulnerabilities, and supply‑chain risks; recommend mitigation strategies and system hardening approaches.
• Track compliance with authoritative orders (OPORDs, TASKORDs, FRAGOs, ALCOASTs, TCTOs).
• Produce cybersecurity readiness updates, briefings, metrics, and risk memorandums; respond to Government data calls as needed.
• Provide mentorship and technical leadership to junior cybersecurity team members and provide recommendations to improve processes and contract operations.

Qualifications

Required Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or related technical field.
• Must have nine (9) years of progressive experience in cybersecurity engineering, ISSE, RMF, or related technical domains.
• Must hold one of the following active certifications: CISSP, CISSP‑ISSEP, CISSP‑ISSAP, CompTIA SecurityX (CASP+), CSSLP, CCSP, or CompTIA Cloud+.
• Demonstrated experience executing the RMF lifecycle, including control implementation, assessment, and continuous monitoring.
• Strong understanding of cybersecurity engineering, risk management, networking, vulnerabilities, laws and regulations, and secure system design.
• Excellent communication skills with demonstrated experience briefing senior Government stakeholders.
• Must have an active DoD Secret Clearance or higher. Must be a U.S. Citizen

Desired Qualifications

• Prior cybersecurity support experience with USCG, DHS, or DoD customers.
• Experience with tools such as eMASS, ACAS/Nessus, HBSS, Tanium, Elastic SIEM, Splunk, ServiceNow, and Burp Suite.
• Experience with OT/ICS/SCADA security or platform systems (shipboard, aviation, industrial control systems).
• Familiarity with DHS 4300A, COMDTINST cybersecurity policy, DoDAF artifacts, ITIL/DESMF processes, and DevSecOps pipelines.

Compensation Statement

At Sabre Systems, LLC, compensation is based on factors such as location, qualifications, experience, and contract-specific requirements; however, final compensation will be determined by individual qualifications and applicable contract terms. The general salary range for this position is as follows: $160,000.00 - $190,000.00

Refer & Earn: Employee Referral Bonus Eligibility

• This requisition is not bonus-eligible, but we still welcome and value your referrals. At Sabre Systems, we encourage employees to refer exceptional candidates. If you have any questions about the referral policy or this position,

Sabre Overview

Sabre Systems, LLC, has been providing innovative technological solutions and services for Department of Defense, Federal Civilian, and commercial customers for more than 35 years. We support the ever‑evolving areas of advanced communication technologies, cyber, systems and software engineering, and digital transformation.

With over three decades in business, Sabre Systems, LLC remains committed to our small business values and a people‑first philosophy. We foster a welcoming, inclusive culture that values diverse perspectives and encourages open communication. Our collaborative environment supports continuous learning and professional growth at all levels. We prioritize the health, well‑being, and success of our employees, offering comprehensive, evolving benefits designed to meet their diverse needs. Join us and be part of a thriving, people‑driven culture.

We respect the unique perspectives that a diverse workforce of minorities, women, individuals with disabilities, and protected veterans brings not only to our company, but also to our customers. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, gender identity and sexual orientation), national origin, age, disability or genetic information.

EEO Minorities/Females/Disability/Veterans; VEVRAA Federal Contractor

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, gender identity and sexual orientation), national origin, age, disability or genetic information.

Beware of employment scams

Beware of employment scams – Sabre Systems will never request payment, extend offers without an interview, or contact you from an email that doesn’t end in @sabresystems.com;

Required Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or related technical field.
• Must have nine (9) years of progressive experience in cybersecurity engineering, ISSE, RMF, or related technical domains.
• Must hold one of the following active certifications: CISSP, CISSP‑ISSEP, CISSP‑ISSAP, CompTIA SecurityX (CASP+), CSSLP, CCSP, or CompTIA Cloud+.
• Demonstrated experience executing the RMF lifecycle, including control implementation, assessment, and continuous monitoring.
• Strong understanding of cybersecurity engineering, risk management, networking, vulnerabilities, laws and regulations, and secure system design.
• Excellent communication skills with demonstrated experience briefing senior Government stakeholders.
• Must have an active DoD Secret Clearance or higher. Must be a U.S. Citizen

Desired Qualifications

• Prior cybersecurity support experience with USCG, DHS, or DoD customers.
• Experience with tools such as eMASS, ACAS/Nessus, HBSS, Tanium, Elastic SIEM, Splunk, ServiceNow, and Burp Suite.
• Experience with OT/ICS/SCADA security or platform systems (shipboard, aviation, industrial control systems).
• Familiarity with DHS 4300A, COMDTINST cybersecurity policy, DoDAF artifacts, ITIL/DESMF processes, and DevSecOps pipelines.

Sabre Systems seeking a Principal Cybersecurity Engineer to provide senior‑level Information System Security Engineering (ISSE) support for a federal cybersecurity program operating under the Risk Management Framework (RMF). This role requires advanced engineering expertise and includes advisory duties supporting federal information systems, operational technology (OT), and hybrid cyber-physical platforms. The Principal Cybersecurity Engineer will guide cybersecurity architecture, compliance, threat analysis, and continuous monitoring while producing high‑quality documentation and executive‑level deliverables.

Work Environment & Additional Requirements

• Location: Hybrid – National Capital Region
• Hybrid work with on‑site presence required for classified work
• Occasional CONUS travel

Key Responsibilities

• Serve as the lead ISSE for assigned information systems, OT environments, and hybrid cyber‑physical platforms.
• Lead or support the full RMF lifecycle—from categorization and control selection through assessment, authorization, continuous monitoring, and decommissioning.
• Develop, update, and maintain RMF documentation in eMASS, including SSPs, SCTMs, POA&Ms, SARs, contingency/incident response plans, risk analyses, inventories, diagrams, and data flows.
• Conduct Security Readiness Reviews; analyze ACAS/Nessus data; validate remediation and coordinate DISA ticket actions.
• Support ongoing compliance with DoD, DHS, USCG, and DISA STIG requirements; contribute to cATO efforts, automated evidence gathering, and dashboard integration.
• Perform Security Impact Assessments and participate in engineering reviews, change control boards, acquisition milestones, and technical working groups.
• Integrate Zero Trust principles, RMF control requirements, and OT/ICS security considerations into system engineering and architecture.
• Evaluate cyber threats, adversary TTPs, OT/ICS vulnerabilities, and supply‑chain risks; recommend mitigation strategies and system hardening approaches.
• Track compliance with authoritative orders (OPORDs, TASKORDs, FRAGOs, ALCOASTs, TCTOs).
• Produce cybersecurity readiness updates, briefings, metrics, and risk memorandums; respond to Government data calls as needed.
• Provide mentorship and technical leadership to junior cybersecurity team members and provide recommendations to improve processes and contract operations.