Senior Cybersecurity Engineer

Carnegie Mellon University; Arlington (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

Carnegie Mellon University in Arlington, VA seeks a Senior Cybersecurity Engineer to advance cybersecurity resilience for mission-critical services. The role blends consulting with cross-functional teams, standardization efforts, and applied research to improve security practices for defense and critical infrastructure clients.

You will work with leaders across government, academia, and industry, applying advanced tools and methodologies to protect national security and economic stability.

Qualifications

• Experience managing information security risk and controls.
• Experience with technology controls and cloud services.
• Experience with business continuity and disaster recovery.
• Consulting experience with government or private sector.
• Familiarity with NIST CSF, SP 800s and ISO 27000.
• Knowledge of audit and assessment methodologies.
• Understanding critical infrastructure protection concepts.
• Understanding maturity models (e.g., CMMI).
• Strong collaborative and diplomatic skills.

Responsibilities

• Provide direct consulting with mission partners and subject matter experts across the CA portfolio.
• Support cybersecurity assessment standardization and security measurement approaches.
• Collaborate on multidisciplinary teams solving difficult client challenges across diverse environments.
• Serve as a trusted advisor to defense and critical infrastructure customers.
• Research novel methods for managing cybersecurity resilience across component disciplines.

Skills

Risk management

Tech controls

Continuity planning

Security deployment

Consulting

Standards familiarity

Audit methods

Critical infrastructure

Maturity models

Customer collaboration

Education

BS degree

MS degree

PhD

Job description

Position Summary

Do you want to make a difference and help support the resilience and security of the nation? As part of the Cyber Risk and Resilience Directorate, you will be part of a team of cyber security engineers applying the latest tools, techniques, and methods to cyber security and operational resilience challenges. The Senior Cybersecurity Engineer will work directly with leaders in government, academia, and industry to protect the services and capabilities that the American public relies on every day for national security and economic stability. The Senior Cybersecurity Engineer will support the operational capabilities and evolution of the Cybersecurity Assurance Team (CA Team), specifically focusing on cybersecurity, operational resilience, and applied research in these areas. The CA team develops solutions (in the form of frameworks, models, tools, policies, practices, technical guidance, and training) that allow industry, government, and military components to measure and improve their management of operational and technical risks to mission-critical services. This includes and is linked to the impact of changes in technology, including artificial intelligence and agentic driven systems.

Position Summary

Do you want to make a difference and help support the resilience and security of the nation? As part of the Cyber Risk and Resilience Directorate, you will be part of a team of cyber security engineers applying the latest tools, techniques, and methods to cyber security and operational resilience challenges. The Senior Cybersecurity Engineer will work directly with leaders in government, academia, and industry to protect the services and capabilities that the American public relies on every day for national security and economic stability. The Senior Cybersecurity Engineer will support the operational capabilities and evolution of the Cybersecurity Assurance Team (CA Team), specifically focusing on cybersecurity, operational resilience, and applied research in these areas. The CA team develops solutions (in the form of frameworks, models, tools, policies, practices, technical guidance, and training) that allow industry, government, and military components to measure and improve their management of operational and technical risks to mission-critical services. This includes and is linked to the impact of changes in technology, including artificial intelligence and agentic driven systems.

As a Senior Cybersecurity Engineer, you will be responsible for direct consulting with mission partners and subject matter experts across the CA portfolio. You will support cybersecurity assessment standardization, develop and employ security measurement approaches, and transition your knowledge and expertise to the broader community. You will work collaboratively on multidisciplinary teams solving difficult customer challenges in diverse environments. You will serve as a trusted advisor to defense and critical infrastructure customers. Cybersecurity Engineers also have the opportunity to conduct research into novel methods and approaches to managing cybersecurity resilience across all the component disciplines (for example cyber operations, application of artificial intelligence, continuity planning and management, organizational and social implications and mitigations related to cyber incidents and failures).

Knowledge, Skills And Abilities

• Industry experience at a mid to senior level managing information security risks and implementing controls
• Industry experience at a mid to senior level managing technology controls and risks, for example change management, managing infrastructure, capacity planning, availability, managing cloud services, technology implementations.
• Industry experience at a mid to senior level managing continuity related controls and risks (business continuity, disaster recovery, for example).
• Experience deploying information technology, for example implementing security technology, or designing, building, and maintaining networks
• Consulting experience with private industry or government customers, including leading projects and engagements
• Familiarity with cybersecurity and resilience standards (e.g., NIST CSF, NIST SP 800 series, ISO 27000 series, etc.).
• Knowledge of audit and assessment methodologies, tactics, techniques, and procedures
• Knowledge of critical infrastructure protection concepts and standards.
• An understanding of maturity model concepts, for example CMMI, Financial Sector Cyber Profile
• Ability to deal collaboratively, diplomatically, and successfully with customers, co-workers and other professional colleagues, managers, and staff.

Requirements

• Education and Experience: BS degree in a relevant discipline with 10 years of applicable experience, or a MS degree in a relevant discipline with 8 years of applicable experience, or a PhD in a relevant discipline with 5 years of applicable experience