Senior Cyber Security Engineer

Astrion; Bedford, Lincoln (MA, MA); On-site; USD 155,000 - 165,000; Full time

Job summary

Astrion is seeking a Senior Cybersecurity Engineer to support the Air Force Life Cycle Management Center at Hanscom AFB, Bedford, MA. The role focuses on securing DoD systems, managing vulnerability scans, and implementing RMF/ STIG controls to protect DoD networks and data.

The ideal candidate holds a CISSP, has an active Secret clearance, ABET‑accredited engineering degree, and 10–15 years of DoD experience, with strong communication and collaboration skills for cross‑functional teams.

Qualifications

• Citizenship: Must be a US citizen.
• Clearance: Active Secret clearance.
• Certification: CISSP Certification.
• ABET-accredited degree with 10–15 years DoD experience (10 in DoD).
• Experience with DoD cloud infrastructure and CI/CD DevSecOps practices is preferred.

Responsibilities

• Assist with installation, configuration, and maintenance of ACAS components (Nessus, SecurityCenter/Tenable.sc, NNM/Nessus).
• Schedule and execute vulnerability scans; analyze results for vulnerabilities and misconfigurations.
• Direct DISA STIG-based configuration hardening across multi-classification networks.
• Assist with compliance assessments against DoW standards and internal policies; generate vulnerability and remediation reports.
• Collaborate with system administrators to remediate vulnerabilities; assist with system administration tasks for ACAS servers and databases.
• Manage cybersecurity incident reporting and root-cause analysis; develop corrective action plans and POA&Ms.

Skills

Strong communication

Collaboration

Analytical thinking

Multitasking

Independent work

Education

ABET-accredited engineering degree

10–15 years DoD experience

Tools

Nessus

SecurityCenter/Tenable.sc

Nessus Network Monitor

eMASS

ACAS

STIG

Job description

Overview

SENIOR CYBERSECURITY ENGINEER

LOCATION: Hanscom AFB, Bedford, MA

Salary Range: $155,000 - $165,000

JOB STATUS: Full-time

CLEARANCE: Secret

CERTIFICATION: CISSP

Astrion has an exciting opportunity for a Senior Cybersecurity Engineer providing support to the Air Force Life Cycle Management Center-Ground Base Air Defense Sensor division (AFLCMC/ESG).

The ESG Division manages efforts focused on developing, acquiring, fielding and sustaining programs that support worldwide communications, Battle Management, Command & Control, Intelligence, Surveillance & Reconnaissance (C2ISR), Air/Ground Surveillance, Time Critical Targeting, Combat Identification, Radar Imagery, Integrated Air/Missile Defense, and Mobile/Fixed C2ISR Performance, Exploitation & Dissemination Facilities.

REQUIRED QUALIFICATIONS / SKILLS

• Citizenship: Must be a US citizen
• Clearance: Active Secret clearance
• Certification: CISSP Certification

PREFERRED QUALIFICATIONS / SKILLS

Preferred Qualifications

• Education: Bachelor’s degree in a professional engineering discipline from an ABET-accredited educational program and at least 10-15 years of experience in the respective technical/professional discipline, 10 of which must be in the DoD.

• Understanding of cybersecurity in DoD cloud infrastructure.
• Knowledge of Agile methodologies including CI/CD, DevSecOps, and DevOps.
• Expereinece with systems analysis and eMASS
• Strong ability to communicate technical topics effectively in both written and verbal forms.

Technical Skills

• STIG compliance
• Risk Management Framework (RMF) implementation and documentation.
• DoD cybersecurity policies and compliance.
• System Authorization and Accreditation (A&A) processes.
• DoD cloud infrastructure security.
• Agile development methods including CI/CD, DevSecOps, and DevOps.
• Security risk, vulnerability, and contingency planning.
• PKI management and access control.
• Classified material handling and accountability.

Interpersonal Skills

• Strong verbal and written communication skills for both technical and non-technical audiences.
• Ability to collaborate with government, contractor, and industry stakeholders.
• Effective problem-solving and analytical thinking.
• Ability to work independently and manage multiple priorities in a fast-paced environment.
• Adaptability to evolving program requirements and security challenges.

RESPONSIBILITIES

Duties include, but not limited to:

• Assist with the installation, configuration, and maintenance of ACAS components, including Nessus scanners, SecurityCenter/Tenable.sc, and Nessus Network Monitor (NNM)/Tenable.asm.
• Assist in scheduling and executing vulnerability scans using Nessus scanners.
• Analyze scan results to identify vulnerabilities, and misconfigurations.
• Direct DISA STIG-based configuration hardening across multi-classification networks
• Assist with compliance assessments against DoW standards and internal security policies.
• Generate reports on vulnerability status, compliance posture, and remediation progress.
• Collaborate with system administrators to facilitate vulnerability remediation efforts.
• Assist with system administration tasks for ACAS servers and databases.
• Manage cybersecurity incident reporting and conduct root‑cause analysis
• Develop corrective action plans and maintain POA&Ms
• Stay up to date on the latest vulnerability trends and security threats.