Senior Cybersecurity Engineer

Astrion; Lincoln (MA); On-site; USD 150,000 - 175,000; Full time

Job summary

Astrion is seeking a Senior Cybersecurity Engineer to support the Air Force’s C3C/Kessel Run division. This on-site role at Hanscom AFB requires an Active Top Secret clearance and deep RMF experience under NIST SP 800-53.

Salary ranges from $150,000 to $175,000 annually, with full-time status, limited travel, and collaboration with government and industry partners on cyber defense capabilities, cloud security, and DoD compliance.

Qualifications

• Active Top Secret clearance required.
• 5+ years dedicated DoD cybersecurity RMF/NIST SP 800-53 experience.
• IAM Level III Certification.

Responsibilities

• Assist with ACAS installation, configuration, and maintenance.
• Schedule and execute vulnerability scans using Nessus.
• Analyze scan results to identify vulnerabilities and misconfigurations.
• Direct DISA STIG-based configuration hardening across multi-classification networks.
• Assist with compliance assessments against DoD standards and internal policies.
• Generate reports on vulnerability status and remediation progress.
• Collaborate with system admins to remediate vulnerabilities.
• Maintain ACAS servers and databases.

Skills

Clearance management

RMF/NIST SP 800-53

Communication

Vendor collaboration

Problem-solving

Education

ABET-accredited engineering degree

10-15 years DoD experience

Tools

Nessus

SecurityCenter/Tenable.sc

Nessus Network Monitor

ACAS

eMASS

Job description

Overview

Senior Cybersecurity Engineer

LOCATION: Hanscom AFB, MA

Salary Range:$150-$175,000 annually*

*depending on experience, certifications, and qualifications

JOB STATUS:Full-time

CLEARANCE: Top Secret

TRAVEL:Limited, as needed

Astrion has an exciting opportunity for a Senior Cybersecurity Engineer to support the Command, Control, Communications (C3C)/Kessel Run division.

Kessel Run is an Air Force unit that delivers resilient command and control and targeting software capabilities that provide warfighters with decision advantage. Under the Department of the Air Force Program Executive Office for Command, Control, Communication, and Battle Management (DAF PEO C3BM), Kessel Run technologies make up the DAF BATTLE NETWORK, the systems-of-systems designed to help the Joint Force make operational decisions faster than our adversaries. The Division architects and acquires the means to connect weapon systems with warfighters and decision makers to enable the warfighter to win against the pacing challenge in an era of great power competition.

Minimum Required Qualifications

Clearance: Must have and be able to maintain an Active Top Secret clearance

Education:5+ years of dedicated DOW cybersecurity experience executing RMF under NIST SP 800-53

Certifications:IAM Level III Certification (Certified Information Systems Security Professional / Certified Information Security Officer)

Preferred Qualifications

Education: Bachelor’s degree in a professional engineering discipline from an ABET-accredited educational program and at least 10-15 years of experience in the respective technical/professional discipline, 10 of which must be in the DoD.

• Understanding of cybersecurity in DoD cloud infrastructure.

• Knowledge of Agile methodologies including CI/CD, DevSecOps, and DevOps.

• Expereinece with systems analysis and eMASS

• Strong ability to communicate technical topics effectively in both written and verbal forms.

Technical Skills

• STIG compliance

• Risk Management Framework (RMF) implementation and documentation.

• DoD cybersecurity policies and compliance.

• System Authorization and Accreditation (A&A) processes.

• DoD cloud infrastructure security.

• Agile development methods including CI/CD, DevSecOps, and DevOps.

• Security risk, vulnerability, and contingency planning.

• PKI management and access control.

• Classified material handling and accountability.

Interpersonal Skills

• Strong verbal and written communication skills for both technical and non-technical audiences.

• Ability to collaborate with government, contractor, and industry stakeholders.

• Effective problem-solving and analytical thinking.

• Ability to work independently and manage multiple priorities in a fast-paced environment.

• Adaptability to evolving program requirements and security challenges.

The Assured Compliance Assessment Solution (ACAS) Cybersecurity Engineer will be a member of the Air Operation Center (AOC) cybersecurity team and will be responsible for assisting with the implementation, maintenance, and operation of the Assured Compliance Assessment Solution (ACAS) suite of tools. This is an entry-level position that will provide the opportunity to gain hands‑on experience with a wide range of cybersecurity technologies and processes.

Duties include, but not limited to:

• Assist with the installation, configuration, and maintenance of ACAS components, including Nessus scanners, SecurityCenter/Tenable.sc, and Nessus Network Monitor (NNM)/Tenable.asm.
• Assist in scheduling and executing vulnerability scans using Nessus scanners.
• Analyze scan results to identify vulnerabilities, and misconfigurations.
• Direct DISA STIG-based configuration hardening across multi-classification networks
• Assist with compliance assessments against DoW standards and internal security policies.
• Generate reports on vulnerability status, compliance posture, and remediation progress.
• Collaborate with system administrators to facilitate vulnerability remediation efforts.
• Assist with system administration tasks for ACAS servers and databases.
• Manage cybersecurity incident reporting and conduct root‑cause analysis
• Develop corrective action plans and maintain POA&Ms
• Stay up to date on the latest vulnerability trends and security threats.

#CJ