Senior Cybersecurity Engineer

VMD Corp; Maryland; On-site; USD 150,000 - 210,000; Full time

Job summary

VMD Corp, now part of Xcelerate Solutions, is seeking a Senior Cybersecurity Engineer to support TSA's Office of Information Technology, Technology Solutions Division. You will lead security initiatives across IT projects, working with security engineers and stakeholders to identify risks and translate standards into actionable tasks.

The role requires 15+ years IT/cybersecurity, CISSP or CISM, experience with SDLC, DevSecOps, and multiple OS; you will develop security guidance and help protect

Qualifications

• Bachelor's degree required; CISSP or CISM certification preferred.
• 15+ years of IT/cybersecurity experience with networking/OS/secure software development background.
• Experience with security development lifecycle, DevSecOps, and CI/CD integration.
• Ability to apply security standards (NIST, DHS, TSA) to practical tasks and controls.
• Strong leadership and ability to communicate with technical and executive stakeholders.

Responsibilities

• Lead and coordinate security initiatives across IT projects and programs.
• Collaborate with security engineers and various departments to identify risks and recommend mitigations.
• Translate cybersecurity standards into actionable tasks and guidance.
• Assess security threats and determine impact of new technologies on TSA program.
• Develop security program goals, metrics, and communication plans.
• Engage with enterprise architecture and governance forums for security reviews.

Skills

Security leadership

Threat modeling

Security risk assessment

CI/CD security

Programming (Java, Python, Go)

OS proficiency (Windows, Linux, Unix)

Stakeholder communication

Education

Bachelor's degree

Tools

Tenable Security Center

Nessus

DbProtect

Venafi

Burp Suite Pro

Job description

Why Join VMD Corp?

At VMD, now a part of Xcelerate Solutions, you have the opportunity to thrive in your career and become a Game Changer. The quality and talent of our people is what drives our success. We embrace an employee-first culture and make it a priority to provide professional development opportunities that foster career growth.

We help protect American Citizens and the nation’s most critical infrastructure by working alongside our customers and delivering game changing solutions to strengthen their missions. We believe our passion and commitment to achieve our customers' goals and solve their most critical challenges defines who we are. We don’t just dream big, we act on it – through teamwork, dedication, and resilience.

Your Impact to the Mission:

The Senior Cybersecurity Engineer will support the Transportation Security Administration (TSA) Office of Information Technology, Technology Solutions Division (TSD), specifically their mission critical systems.

Your Impact to the Mission:

As a Senior Cybersecurity Engineer you will leverage technical knowledge and experience to support and lead the security initiative for multiple IT projects, programs, and initiatives. You will be responsible for working with a team of security engineers and actively interacting and communicating with various departments, teams, and workgroups to provide hands‑on technical cybersecurity support on potential security risks and recommendations. You will be interacting with technical staff to executive staff, adjusting the communication and feedback accordingly.

• Supporting the response for planned and unplanned security assessments including documentation collection and review, documentation creation and maintenance, and artifact/evidence review and validation.
• Analyzing and investigating potential security threats against technologies in use as well as those planned for future use.
• Performing an ongoing review of industry/government best practices for system security to provide expert technical guidance for translating NIST, DHS, and TSA cybersecurity standards, policies and procedures into actionable tasks.
• Determining the security impact of new technologies or policies on the TSA information security program.
• Developing and presenting recommendations for changes to improve security posture.
• Implementing security improvements as needed for protecting mission critical systems.
• Leveraging existing government-provided security scan tools such as Tenable Security Center, Nessus, DbProtect, Venafi, Burp Suite Pro and others.
• Providing security engineering subject matter expertise in coordination with enterprise architecture and technical review boards.
• Developing and maintaining information security program strategic and tactical goals and objectives and program outreach/communication plans.
• Identifying, developing, and maintaining a performance management program, that includes performance measures, tracking metrics, and trend analysis.

Experience Needed to Be Successful:

• 15+ years of work experience in IT and cybersecurity, with a technical background in networking, operating system, and/or software development
• Active Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) certification
• Experience with security development lifecycle management, DevSecOps, and CI/CD integration
• Ability to leverage programming languages where feasible such as Java, PHP, C, .NET, Go, or Python
• Experience with various operating systems including Windows, Linux and Unix
• Strong leadership and interpersonal skills to facilitate effective collaboration across a variety of stakeholders
• Demonstrated ability to function independently and define the proper methods & procedures
• Understanding of guiding cybersecurity principles and control guidance
• Effective writing skills to capture issues and recommendations
• Strong customer relationship building ability

Basic Qualifiers:

• Education Requirement: Bachelor’s degree
• Can Additional Years of Experience Substitute for Degree?Yes
• Required Certification(s):Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM)
• Minimum Years of Overall Experience:15+
• Minimum Years of Specific Experience in Field:5
• Minimum Clearance to Start:Secret
• Work Status Allowable:US Citizenship

The Type of Person That Will Excel:

• You are curious, inquisitive, and have demonstrated a constant eagerness to learn through actions.
• You have high attention to detail.
• You demonstrate personal accountability and integrity in all actions.

Travel and Telecommuting:

• Travel:Little (less than 10%)
• Telecommute Options:Yes. Hybrid: 2 days onsite one week, 3 days onsite the next. On-call: Required periodically, with annual coverage varying up to 3-4 months

Xcelerate Solutions and its subsidiaries are Equal Employment Opportunity/Affirmative Action Employers. We evaluate qualified applicants without regard to race, color, national origin, religion, age, equal pay, disability, veteran status, sex, sexual orientation, gender identity, genetic information, or expression of another protected characteristic. As part of this commitment to the full inclusion of all qualified individuals, Xcelerate provides reasonable accommodations if needed because of an applicant's or an employee's disability. Xcelerate Solutions maintains a drug-free workplace.