Senior Cybersecurity Engineer

Carnegie Mellon University; Arlington (VA); Hybrid; USD 100,000 - 140,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Tuition benefits

Fitness center access

Free transit pass

Job summary

Carnegie Mellon University in Arlington, VA is seeking a Senior Cybersecurity Engineer to support national security and resilience. The role focuses on cybersecurity, advising teams, and leading engagements in a dynamic environment.

Applicants should possess a relevant degree and significant experience in managing cybersecurity initiatives. Key responsibilities include engaging with government and industry partners, developing technical guidance, and contributing to multiple projects in a collaborative setting.

Comprehensive benefits include health insurance, tuition reimbursement, and additional perks for staff.

Qualifications

• Experience managing information security risks.
• At least 10 years of applicable experience in cybersecurity.
• Strong leadership and project management capabilities.

Responsibilities

• Lead engagements with customers and mission partners.
• Contribute to projects designed to advance cybersecurity.
• Engage with communities of interest and present work.

Skills

Managing information security risks

Managing technology controls

Business continuity and disaster recovery

Deploying IT security technology

Consulting experience

Familiarity with cybersecurity standards

Knowledge of assessment methodologies

Knowledge of critical infrastructure protection

Understanding of maturity models

Collaborative communication

Education

BS in relevant discipline with 10 years of experience

MS in relevant discipline with 8 years of experience

PhD in relevant discipline with 5 years of experience

Tools

Cybersecurity frameworks

Security assessment tools

Project management software

Job description

Position Summary

Do you want to make a difference and help support the resilience and security of the nation? As part of the Cyber Risk and Resilience Directorate, you will be part of a team of cyber security engineers applying the latest tools, techniques, and methods to cyber security and operational resilience challenges. The Senior Cybersecurity Engineer will work directly with leaders in government, academia, and industry to protect the services and capabilities that the American public relies on every day for national security and economic stability. The Senior Cybersecurity Engineer will support the operational capabilities and evolution of the Cybersecurity Assurance Team (CA Team), specifically focusing on cybersecurity, operational resilience, and applied research in these areas. The CA team develops solutions (in the form of frameworks, models, tools, policies, practices, technical guidance, and training) that allow industry, government, and military components to measure and improve their management of operational and technical risks to mission‑critical services. This includes and is linked to the impact of changes in technology, including artificial intelligence and agentic driven systems. As a Senior Cybersecurity Engineer, you will be responsible for direct consulting with mission partners and subject matter experts across the CA portfolio. You will support cybersecurity assessment standardization, develop and employ security measurement approaches, and transition your knowledge and expertise to the broader community.

Knowledge, Skills and Abilities

• Industry experience at a mid to senior level managing information security risks and implementing controls
• Industry experience at a mid to senior level managing technology controls and risks, for example change management, managing infrastructure, capacity planning, availability, managing cloud services, technology implementations.
• Industry experience at a mid to senior level managing continuity related controls and risks (business continuity, disaster recovery, for example).
• Experience deploying information technology, for example implementing security technology, or designing, building, and maintaining networks
• Consulting experience with private industry or government customers, including leading projects and engagements
• Familiarity with cybersecurity and resilience standards (e.g., NIST CSF, NIST SP 800 series, ISO 27000 series, etc.).
• Knowledge of audit and assessment methodologies, tactics, techniques, and procedures
• Knowledge of critical infrastructure protection concepts and standards.
• An understanding of maturity model concepts, for example CMMI, Financial Sector Cyber Profile
• Ability to deal collaboratively, diplomatically, and successfully with customers, co‑workers and other professional colleagues, managers, and staff.

Requirements

• Education and Experience: BS degree in a relevant discipline with 10 years of applicable experience, or a MS degree in a relevant discipline with 8 years of applicable experience, or a PhD in a relevant discipline with 5 years of applicable experience.
• Technical Excellence: track record of successfully leading projects for a technical discipline. User‑centered and accomplishment‑focused, driving projects and the people that work on them to successful, high‑impact outcomes.
• Leadership: ability to lead diverse teams in analyzing and solving real‑world problems by developing engineering guidance as well as applying and tailoring, as appropriate, SEI and non‑SEI technologies and resources. Ability to lead extends to situations outside immediate team or span of control (leadership by influence).
• Working in a Creative, Dynamic Environment: experience contributing to multiple simultaneous projects and thrive in a creative and high‑energy environment. Willingness to experiment with new practices and develop effective processes, practices, and infrastructure to support successful projects.
• Mentorship: enjoys mentoring, motivating, and empowering less‑experienced team members in ways that promote performance and teamwork.
• Communication: outstanding communicator and can interact collaboratively and diplomatically with customers and colleagues at all levels of knowledge and experience. Grasp the big picture, direction, and goals. Ability to dig into details on problems and technical concepts and present complex ideas to people who may not have a deep understanding of the subject area.
• Travel: frequent (15-35%) to various locations within the SEI and CMU community, customer sites, conferences, and off‑site meetings.
• Security Clearance: subject to background investigation and must have the ability to obtain and maintain a Department of Defense security clearance.
• Applicants must be legally authorized to work for CMU in the United States. CMU will not sponsor or take over sponsorship of an employment visa for this opportunity.

Duties

• Customer Engagement (50%): lead engagements with customers and mission partners. Represent the CA Team’s and SEI’s work to mission partners.
• Project Participation (30%): contribute to customer projects designed to advance the state of the art in cybersecurity. Represent SEI regularly presenting our mission and our work to stakeholders.
• Community Engagement (15%): engage with communities of interest; present mission and work via publication and presentation. Build and maintain relationships with relevant research and technology communities.
• Professional Development (5%): continue to grow knowledge and skills in cybersecurity and stay current on emerging trends and topics relevant to the team’s portfolio.

Desired Experience

• Strong writing/editing ability. Ability to interact with others and function as a member of a process action team or instructional design working group. Experience with course and information mapping, flowcharting, etc.
• Certifications: A+ CE, CCNA‑Security, CND, Network+ CE, SSCP, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Project Management Professional (PMP), or equivalent experience.
• Some military experience can be beneficial in terms of understanding the institute’s mission and stakeholders.

Benefits

Employees enjoy comprehensive medical, prescription, dental, and vision insurance and a generous retirement savings program with employer contributions. Tuition benefits, paid time off, holidays, and life and accidental death and disability insurance. Additional perks include a free Pittsburgh Regional Transit bus pass, Family Concierge Team to help childcare needs, fitness center access, and more.

EEO Statement

Carnegie Mellon University is an Equal Opportunity Employer/Disability/Veteran.

Location

Arlington, VA, Pittsburgh, PA

Job Function

Software/Applications Development/Engineering

Position Type

Staff – Regular

Full Time/Part time

Full time

Pay Basis

Salary