Senior Cybersecurity Engineer

Jobtailor; Pennsylvania; On-site; USD 140,000 - 230,000; Full time

Job summary

SEI, the Software Engineering Institute, seeks Cybersecurity Risk Engineers to advance quantitative risk analysis across projects.

You will build models, perform threat and risk assessments, and communicate results to technical and non-technical stakeholders to inform risk management decisions.

Qualifications

• BS degree in Computer Science, Statistics, Engineering, Mathematics, Economics, Data Science, or related quantitative field with extensive experience.
• Deep understanding of risk management principles in cybersecurity.
• Experience performing cyber risk analysis, risk quantification, or security measurement.
• Expertise in statistics, econometrics, data science or related quantitative fields.
• Experience with threat modeling, vulnerability analysis, or security assessments.
• Ability to communicate complex findings to technical and non-technical audiences.

Responsibilities

• Identify, research, and solve cyber security challenges.
• Collaborate with mission partners to apply advanced quantitative skills and develop prototype solutions.
• Build and evaluate models, conduct applied research, present findings to stakeholders, and develop transition plans.
• Conduct organizational security assessments and perform threat modeling and economic analysis in cybersecurity.

Skills

risk analysis

statistics

mathematics

data science

machine learning

threat modeling

uncertainty quantification

economic analysis

communication

presentation

systems engineering

problem solving

team collaboration

Education

MS in a relevant quantitative discipline with 8 years of experience

BS in a quantitative discipline with 10 years of experience

PhD in a relevant discipline with 5 years of experience

Job description

Cybersecurity Risk Engineers at SEI use advanced skills in statistics, mathematics, risk analysis, systems engineering, economics and other technical fields in an interdisciplinary manner.

Responsibilities

• Identify, research, and solve cyber security challenges.
• Work with mission partners to identify areas where advanced quantitative & technical skills can help tackle problems, plan and develop prototype solutions, and create final products designed to better manage risk.
• Build and evaluate models, create products, conduct applied research, present findings to stakeholders, and develop transition plans for solutions to partners.
• Conduct organizational security assessments, evaluate risk management programs, and perform threat modeling and economic analysis in cybersecurity.

Requirements

• BS degree in Computer Science, Statistics, Engineering, Mathematics, Economics, Data Science, or a related highly quantitative discipline with ten (10) years of applicable experience; or a MS degree in a relevant discipline with eight (8) years of applicable experience; or a PhD in a relevant discipline with five (5) years of applicable experience.
• Understanding of risk management principles and their application to cybersecurity.
• Experience performing cyber risk analysis, risk quantification, or security measurement.
• Expertise in one or more quantitative disciplines such as statistics, mathematics, econometrics, operations research, systems engineering, data science, or machine learning.
• Experience developing and applying statistical models, predictive analytics, or simulation techniques.
• Experience with uncertainty quantification, probabilistic analysis, or decision science methodologies.
• Experience conducting threat modeling, vulnerability analysis, or security assessments.
• Knowledge of cybersecurity risk management frameworks and methodologies.
• Experience evaluating organizational cybersecurity programs and risk management practices.
• Ability to design and conduct applied research in cybersecurity, risk management, or related fields.
• Strong analytical, problem-solving, and critical-thinking skills.
• Ability to communicate complex technical concepts and analytical findings to both technical and non-technical audiences.
• Ability to work collaboratively, diplomatically, and effectively with customers, colleagues, researchers, and senior stakeholders.