Senior Cyber Systems Engineer

Mtsi Va; Huntsville (AL); Vor Ort; USD 140.000 - 170.000; Vollzeit

Benefits dieser Stelle

PTO 20 days

Holidays 10

Health Insurance

Flexible schedules

Education reimbursement up to $10,000

ESOP

401k match 6%

Semi-annual bonus

Mentorship

Zusammenfassung

MTSI in Huntsville, AL is seeking a Senior Cyber Systems Engineer focused on application security and DevSecOps for the Missile Defense Agency’s Ground-Based Midcourse Defense program. You will apply rigorous engineering practices to cybersecurity across the SDLC, analyzing SAST/DAST results, automating security in CI/CD pipelines, and assessing OSS/COTS/GOTS risks.

You will collaborate with Government leadership and partner teams to drive risk-based decisions.

Qualifikationen

• Active DoD Secret clearance (or higher)
• 7+ years of progressive engineering experience in missile defense/defense programs
• Demonstrated ability to work with minimal guidance and lead technical tasks
• Experience with RMF processes, SAST/DAST, and software composition analysis tooling
• Experience integrating security tests and automation into CI/CD pipelines

Aufgaben

• CI/CD Pipeline & Tooling Integration: support workflow automation and security integration
• Vulnerability & Code Analysis: monitor SAST/DAST scans and triage CWEs/CVEs
• Scan Exception & Vulnerability Management: manage automated scan exceptions and remediation milestones
• Software Assurance Oversight: oversee GM SWAP portal assessments
• Open Source & COTS/GOTS governance: assess OSS/COTS/GOTS software risks
• Dependency Risk Assessments: perform supply chain risk assessments on third-party dependencies

Kenntnisse

DoD security clearance

SAST/DAST/SCA tooling experience

CI/CD security integration

RMF/POA&M knowledge

Security-focused software development

Strong communication

Ausbildung

Bachelor's degree in STEM

Tools

OWASP Top 10

NIST SP 800-218 SSDF

GitLab CI

Jenkins

Fortify

SonarQube

Checkmarx

Anchore

Jobbeschreibung

MTSI is seeking a motivated Senior Cyber Systems Engineer specializing in Application Security and DevSecOps to support the Missile Defense Agency’s (MDA) Ground-Based Midcourse Defense (GMD) Program Office. In this role, you will apply engineering rigor to ensure cybersecurity across the software development lifecycle (SDLC) for critical Mission Software. Working with minimal guidance both as an individual contributor and in collaborative team settings, you will assist Government leadership, Industry Partner development teams, and Cybersecurity Authorizing Officials. Core responsibilities include supporting Software Assurance assessments, evaluating SAST/DAST scan data, integrating security automation within CI/CD pipelines, and assessing third-party open-source/COTS/GOTS software risks under the DoD Risk Management Framework (RMF).Job Responsibilities:CI/CD Pipeline & Tooling Integration: Support workflow automation and security integration within CI/CD pipelines; assist in maintaining and deploying organizational shared security solutions (e.g., standard security libraries, automation scripts, and baseline testing templates).Vulnerability & Code Analysis: Monitor and analyze Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) scans, triage Common Weakness Enumerations (CWEs) and Common Vulnerabilities and Exposures (CVEs), and provide technical risk determinations.Scan Exception & Vulnerability Management: Facilitate and support the automated scan exception process, tracking remediation milestones and documenting false-positive adjudications.Software Assurance (SwA) Oversight: Oversee GM SWAP (Software Assurance Program) Portal assessments to evaluate software risk posture across development tiers.Open Source & Commercial Software Governance: Apply guidance and support assessment processes for Open-Source Software (OSS), Commercial-Off-The-Shelf (COTS), and Government-Off-The-Shelf (GOTS) software.Dependency Risk Assessments: Perform supply chain risk assessments on third-party dependencies and OSS packages; formulate risk assessment recommendations for submission to the ISSM, Security Control Assessor (SCA), Authorizing Official (AO), or AO Designated Representative (AODR).ISSM / ISSO Collaboration: Assist the ISSM and ISSO during operational cyber activities and RMF processes, contributing to Plan of Action and Milestones (POA&M) development and Risk Acceptance Memorandums.Security Control Engineering: Collaborate with software development teams to categorize applications, identify applicable security overlays, tailor NIST SP 800-53 controls, and validate control implementation evidence.Environment Governance: Monitor development, test, and production environments during operations to verify continuous compliance with cybersecurity policies.CDRL & Deliverable Reviews: Review Industry Partner Contract Data Requirements Lists (CDRLs), security assessment reports, and engineering documents to verify Mission Software adherence to system specifications and cybersecurity requirements.Stakeholder Technical Liaison: Communicate Government cybersecurity requirements for application development clearly to Program Offices, Industry Partners, and developers.Audits, Sampling & Training: Conduct periodic application security review sampling and audits; educate developer teams on secure coding principles and how to recognize security-relevant architectural changes.Required QualificationsActive DoD Secret clearance (or higher).Bachelor’s degree in a STEM discipline (Computer Science, Cybersecurity, Software Engineering, Systems Engineering, or related technical field).7+ years of progressive engineering experience supporting missile defense-related programs or large, complex defense programs/projects (preferably with GMD or MDA at a Prime contractor or service support level).Demonstrated ability to work with minimal guidance, execute as a collaborative team member, and lead technical tasks, applying engineering rigor to resolve complex technical challenges.Working knowledge of secure coding frameworks (e.g., OWASP Top 10, NIST SP 800-218 SSDF) and experience with automated SAST, DAST, or Software Composition Analysis (SCA) tooling.Experience supporting automated workflows and security test suites within CI/CD pipelines.Experience with DoD Risk Management Framework (RMF) processes, security control selection, and POA&M tracking.Experience evaluating technical documentation and scan artifacts to support authorization determinations.Strong written and verbal communication skills; ability to deliver briefings, author technical documentation, and collaborate across multi-disciplinary engineering teams.Preferred QualificationsDirect prior experience supporting MDA Ground-Based Midcourse Defense (GMD) or related missile defense elements.Active DoD 8570 / 8140 certification at IAM/IAT Level II or higher (e.g., Security+ CE, CySA+, CISSP, CSSLP, or CCSP).Hands-on familiarity with software assurance platforms, container technologies, and CI/CD tools (e.g., SonarQube, Fortify, Checkmarx, Anchore, GitLab CI, Jenkins).Familiarity with the GM SWAP Portal or equivalent DoD software repository clearinghouses.#LI-JJ1SecretPerks and BenefitsVacation:New Hires Accrue 20 days of PTO and 10 Holidays per YearHealth Insurance:Zero Deductible Health PlansFlexible Schedules:Flex SchedulesProfessional Development:Up to $10,000 Annual Education/Training ReimbursementESOP:Funded Stock Ownership Plan401k Match+:6% 401k Match + Immediate VestingBonus Program:Semi-Annual Bonus OpportunityMentorship:Career Mentorship ProgramsWhy is MTSI a great place to workInteresting Work:Our co-workers support some of the most important and critical programs to our national defense and security.Values:Our first core value is that employees come first. We challenge our co-workers to provide the highest level of support and service, and reward them with some of the best benefits in the industry.100% Employee Owned:We have a stake in each other's success, and the success of our customers. It's also nice to know what's going on across the company; we have company wide town-hall meetings three times a year.Great Benefits - Most Full-Time Staff Are Eligible for:Starting PTO accrual of 20 days PTO/year + 10 holidays/yearFlexible schedules6% 401k match with immediate vesting up to $9k annuallySemi-annual bonus eligibility (July and Decemeber)Company funded Employee Stock Ownership Plan (ESOP) - a separate qualified retirement accountUp to $10,000 in annual educational reimbursementOther company funded benefits, like life and disability insuranceOptional zero deductible Blue Cross/Blue Shield health insurance planTrack Record of Success:We have grown every year since our founding in 1993.Modern Technology Solutions, Inc. (MTSI) is a 100% employee-owned engineering services and solutions company that provides high-demand technical expertise in Digital Transformation, Modeling and Simulation, Rapid Capability Development, Test and Evaluation, Artificial Intelligence, Autonomy, Cybersecurity and Mission AssuranceMTSI delivers capabilities to solve problems of global importance. Founded in 1993, MTSI today has employees at over 20 offices and field sites worldwide.For more information about MTSI, please visitwww.mtsi-va.comEEO StatementMTSI embraces nine core values including our first core value of Employees come first. Consistent with our Core Values, we are committed to Equal Opportunity, making decisions without regard to race, color, religion, sex, national origin, age, military/veteran status, disability, or any other characteristics protected by applicable law. MTSI is committed to Equal Employment Opportunity and providing reasonable accommodations to applicants and employees with physical and/or mental disabilities.Why is MTSI a great place to workInteresting Work: Our co-workers support some of the most important and critical programs to our national defense and security.Values: Our first core value is that employees come first. We challenge our co-workers to provide the highest level of support and service, and reward them with some of the best benefits in the industry.100% Employee Owned: We have a stake in each other's success, and the success of our customers. It's also nice to know what's going on across the company; we have company wide town-hall meetings three times a year.Great Benefits - Most Full-Time Staff Are Eligible for:Starting PTO accrual of 20 days PTO/year + 10 holidays/yearFlexible schedules6% 401k match with immediate vesting up to $9k annuallySemi-annual bonus eligibility (July and Decemeber)Company funded Employee Stock Ownership Plan (ESOP) - a separate qualified retirement accountUp to $10,000 in annual educational reimbursementOther company funded benefits, like life and disability insuranceOptional zero deductible Blue Cross/Blue Shield health insurance planTrack Record of Success: We have grown every year since our founding in 1993.Modern Technology Solutions, Inc. (MTSI) is a 100% employee-owned engineering services and solutions company that provides high-demand technical expertise in Digital Transformation, Modeling and Simulation, Rapid Capability Development, Test and Evaluation, Artificial Intelligence, Autonomy, Cybersecurity and Mission AssuranceMTSI delivers capabilities to solve problems of global importance. Founded in 1993, MTSI today has employees at over 20 offices and field sites worldwide.For more information about MTSI, please visit www.mtsi-va.com