Security Engineer – Lead

Jobtailor; Colorado; On-site; USD 150,000 - 230,000; Full time

Job summary

TSTC is seeking a Security Engineer Lead to guide government-focused security engineering efforts in a dispersed, highly technical team. You will translate NIST and federal cybersecurity standards into actionable tasks, lead architecture reviews, and advise leadership on security implications for new technologies and policies.

The role requires expert integration of security requirements with mission systems architectures, hands-on engineering, and the ability to mentor junior staff and interact

Qualifications

• Bachelor’s Degree and 15 years of related security engineering experience.
• Must have a CISSP or a CISM.
• Provide subject matter expertise to the security requirements allocation and security architecture processes.
• Translate NIST and government cybersecurity standards into actionable tasks.

Responsibilities

• Lead the preparation of responses to federal ad hoc reporting requirements.
• Provide expert technical guidance in security requirements allocation and architecture processes.
• Review evidence and artifacts for A&A processes (SP, CP, CPT, IRP, CMP).
• Assess security impact of new technologies and policies for program approval.
• Develop IT system design alternatives balancing security, function, and cost.

Skills

CISSP

CISM

Security Architecture

NIST Standards

Security Compliance

Incident Response Planning

Security Risk Assessment

Technical Review

Problem Solving

Education

Bachelor’s Degree

Tools

Tenable Security Center

Invicti 360

Trustwave DbProtect

CyberArk Certificate Manager

PortSwigger Burp Suite Pro

MS Office Suite

Job description

• TSTC is looking for a security engineer lead with depth of knowledge in the nuances of government security engineering requirements and policies.
• Self-motivated, able to work in a geographically dispersed team of highly technical security personnel, and who loves problem solving.
• Combine hand’s on security engineering with the ability to translate that and help manage tasks for more junior level staff and is discussing complex topics with senior leadership.
• Candidates must meet or exceed the stated requirements; be excited to join our team and willing to sign a binding letter of commitment; and can start 2 to 3 weeks after notification of contract award.

Requirements

• Bachelor’s Degree and 15 years of related security engineering experience
• Must have a CISSP or a CISM
• Provide subject matter expertise to the security requirements allocation and security architecture processes
• Provide expert technical guidance in translating National Institute for Standards and Technology (NIST), and government agency cybersecurity standards, policies, and procedures into actionable tasks including:
• Reviewing and analyzing all evidence used to verify security vulnerabilities have been sufficiently addressed and/or system artifacts such as those used in the Assessment & Authorization (A&A) process, i.e. Security Plan (SP), Contingency Plan (CP), Contingency Plan Test (CPT), Incident Response Plan, and Configuration Management Plan (CMP), as some, but not all examples
• Reviewing draft documents and providing feedback on allocation of security and privacy requirements (e.g. technical review board (TRB), review of security policies, risk assessments, contingency plans, Plan of Action & Milestone (POA&M) reports)
• Determining the security impact of new technologies or policies (e.g., Continuous Diagnostics & Mitigation (CDM) technologies, anomaly-based tools, virtual environments, etc.) on the TSA information security program for TSA review and approval. The review of security impact should be documented through the completion of the Security Impact Analysis (SIA) process as documented by TSA’s Information Assurance and Cybersecurity Division (IAD)
• Ensuring security requirements are identified, appropriately allocated, and addressed throughout the TSD/SFD mission systems’ architectures
• Experience with Security scan tools and techniques. Examples include:
• Tenable Security Center
• Invicti 360
• Trustwave DbProtect
• CyberArk Certificate Manager (formerly known as Venafi)
• Portswigger Burp Suite Pro
• Lead the preparation of responses to federal ad hoc reporting requirements
• Lead written reviews or assessments in the form of short briefings, written documents, or presentations (expected average of 5-8 per month) as accomplishment reports of Ad hoc Security Engineering services provided (Deliverable #4)
• Help develop alternatives of IT system designs and/or architectures which consider trade-offs between security requirements, functional/operational requirements and cost for TSA review and final approval
• Help determine the impact of new or changing applicable NIST, DHS, and TSA cybersecurity standards and policy changes
• Lead the impact assessments of new or revised legislation and regulations (examples are OMB Memos and Federal Information Security Modernization Act (FISMA)) for review. Lead and support standard operating procedure documentation and updates
• Support weekly security team staff meetings
• Review and ensure security compliance deliverables are accurate and correct
• Skilled in MS office Suite
• Works independently, proactively identifies, and completes task
• Excellent verbal and written skills

Core Competencies

Demonstrates extensive expertise in security engineering, particularly in translating NIST and government cybersecurity standards into actionable tasks. Proven ability to lead teams, manage security architecture processes, and ensure compliance with federal regulations.

Highest-signal resume keywords

• CISSP
• CISM
• Security Architecture
• NIST Cybersecurity Standards
• Security Scan Tools

ATS Optimization Keywords

Hard Skills

• Security Engineering
• Vulnerability Assessment
• Security Compliance
• Risk Assessment
• Security Impact Analysis
• Incident Response Planning
• Configuration Management
• Technical Review
• Cybersecurity Policy Translation
• IT System Design

Soft Skills

• Problem Solving
• Team Collaboration
• Excellent Verbal Communication
• Excellent Written Communication
• Self-Motivated

Certifications & Qualifications

• CISSP
• CISM

Industry Keywords

• Federal Information Security Modernization Act
• Continuous Diagnostics & Mitigation
• Assessment & Authorization
• Contingency Planning
• Security Plan
• Technical Review Board
• Plan of Action & Milestone
• DHS Cybersecurity Standards
• TSA Information Security Program
• OMB Memos

Tools & Technologies

• Tenable Security Center
• Invicti 360
• Trustwave DbProtect
• CyberArk Certificate Manager
• Portswigger Burp Suite Pro
• MS Office Suite