Cybersecurity Security Engineer III

This role is in support of a pending government opportunity. Candidates in the Chandler, AZ area are preferred.

• US Citizenship and eligibility for a Secret Clearance
• Bachelor's Degree in Computer/Engineering Science, Information Systems, Cybersecurity, or related field OR 10 years of work experience in Cybersecurity engineering
• A minimum of 10 (additional) years of work experience in Cybersecurity engineering and/or cybersecurity project management
• 2+ years of leadership experience managing Cybersecurity engineering teams
• At least one of the following: CISSP, CCSP, CCNA,CISSP-ISSAP,CISSP-ISSEP, GIAC, SSCP, Security+ (or equivalent as approved by the Government)
• Experience with developing/integrating cybersecurity designs for systems and networks
• Experience implementing Zero Trust Architecture (ZTA) principles
• Experience developing and producing strategic technology roadmaps aligned with mission requirements
• Experience conducting market research analysis on new cybersecurity tool technologies
• Experience performing technical evaluations and Proof of Concepts for cybersecurity objectives
• Experience with documenting and addressing organizational information security, cybersecurity architecture, and systems security engineering requirements
• Experience with developing system security context, a preliminary system security CONOPS, and define baseline system security requirements in accordance with applicable cybersecurity requirements
• Experience documenting the protection needs (i.e. security controls) for information system(s) and network(s)
• Ability to perform security reviews, identify gaps in security architecture, and develop a security risk management plan
• Ability to develop a system security context, a preliminary system security CONOPS, and define baseline system security requirements in accordance with applicable cybersecurity requirements
• Experience with securing at least one of the following Cloud Service Provider (CSP) types: Infrastructure as a Service (IaaS), Software as a Service (SaaS), and Platform as a Service (PaaS)
• Experience or knowledge of integrating cybersecurity principles with Artificial Intelligence (AI) or GenerativeAI (GenAI)
• Experience providing support for the integration of security into the DevSecOps pipeline activities
• Experience with vulnerability scanning tools to include those supporting operation system, web application, database assessments
• Skill in translating operational requirements into protection needs (i.e. security controls)
• Work experience or knowledge with architecting, engineering, deploying, and tuning of Network Detection and Response (NDR) platforms
• Experience or knowledge of network modeling and behavior technology solutions
• Experience or working knowledge of Cyber Threat Intelligence (CTI) technologies
• Experience or knowledge of Security Orchestration, Automation, and Response (SOAR) solutions
• Work experience or knowledge of Security Information & Event Management (SIEM)
• Mobile security engineering knowledge or experience to include at least one of the following:

• Mobile Threat Detection (MTD)
• Mobile Device Management (MDM) security controls
• Mobile Application Management (MAM) security controls

• Work experience or knowledge of providing technical security engineering support for secure authentication
• Work experience or knowledge integrating of secure authentication / Single SignOn (SSO)
• Work experience or knowledge of Post Quantum Cryptography (PQC) concepts and technology, which may include any of the following:

• Extensive experience with certificate lifecycle management, cryptographic algorithms (RSA, ECC, AES), digital signatures, and cryptographic principles, including emerging post-quantum encryption standards (e.g., NIST PQC algorithms)
• Experience using tools and technologies to enable discovery of cryptographic assets across enterprise networks using network and infrastructure telemetry data
• Experience with requirements gathering to prototype, develop, validate, and build systems to support quantum-ready encryption
• Experience implementing technologies and associated roadmaps to create new telemetry for cryptographic inventorying
• Experience designing, implementing, and evaluating PQC-enabled network protocols for different layers of the OSI model, e.g., PQC-enabled TLS
• Solid understanding of various protocols like TLS, X.509, BGP, DHCP, IPsec, DNSsec, etc.

• At least 2 years of experience working with network packet capture tools like WireShark, tcpdump, nmap, or similar
• Proven experience scripting and automating administrative functions (PowerShell, Python)