Senior Cyber Engineer

The Senior Cyber Engineer plays a critical role in ensuring that acquisitions programs have validated requirements to build mission-critical DoD and federal architectures against sophisticated, state-sponsored cyber threats. This role combines deep technical expertise in adversary Tactics, Techniques, and Procedures (TTPs), static and dynamic malware analysis, operational employment of cyber capabilities, and offensive cyber operations. This role leverages an offensive mindset to anticipate adversary vectors., * Knowledge of Adversary Emulation & Defensible Architecture: Leverage expert knowledge of adversary TTPs (MITRE ATT&CK, Diamond Model, Cyber Kill Chain) to analyze system architectures requirements, identify security gaps in documentation, and advise in the acquisition of architecture that is robust with Defense-in-Depth mitigations.

• Program Management Support: Assist government in management of vendor activities and advise government on technical direction related to the planned development and delivery of capabilities.
• Threat Intelligence Fusion: Synthesize intelligence reports, commercial/threat intelligence platforms, and tactical data into actionable feedback to support acquisitions decisions.
• Technical Mentorship & Team Collaboration: Work independently on assigned projects while mentoring cross-functional team members in offensive/defensive cyber operations tradecraft as well as technical best practices.

• At least 9+ years of related professional cybersecurity experience with a Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Information Systems, or a related technical discipline (or Associates degree with 7+ years of experience; or 15+ years of experience without degree).
• Threat Hunting & Incident Response: Proven track record conducting proactive threat hunts, incident response investigations, forensics, and log analysis in enterprise or mission network environments.
• Adversary Tradecraft & Frameworks: Deep practical understanding of cybersecurity frameworks and models, including the MITRE ATT&CK framework, the Cyber Kill Chain, and the Diamond Model of Intrusion Analysis.
• Network Security & Monitoring: Hands-on experience with network security monitoring (NSM) and intrusion detection/prevention systems (NIDS/NIPS), such as Zeek, Suricata, or Snort.
• SIEM & Data Platforms: Demonstrated experience configuring, administering, or utilizing SIEM and log analytics platforms such as Elastic Security (ELK) or Splunk.
• Scripting & Software Engineering: Strong proficiency in scripting and capability development using Python and Bash; working familiarity with C/C++ is highly desirable for binary analysis and gateway integration.
• Systems Hardening & Defense-in-Depth: Practical knowledge of Defense-in-Depth principles, operating system hardening (Linux/Windows), network segmentation, and system architecture vulnerability assessments.
• Containers & Orchestration: Experience deploying, troubleshooting, and managing applications using Docker containers.
• Automation & Configuration Management: Familiarity with automation and configuration management tools such as Ansible.
• DoD / National Security Experience: Prior experience supporting federal, DoD, Intelligence Community (IC), or joint military cyber components.
• Security Clearance: Active Top Secret Clearance with SCI eligibility required (current TS/SCI with CI Polygraph preferred)., * Advanced Malware Analysis & Reverse Engineering: Documented experience in static and dynamic binary analysis, IDA Pro/Ghidra disassembly, and coordination of novel threat disclosure.
• Applied Machine Learning in Cyber: Experience applying machine learning models (e.g., EMBER, neural networks, or decision tree classifiers) to static malware classification, behavioral analysis, or anomaly detection.
• Offensive Tradecraft & Red Teaming: Completion of advanced offensive cyber coursework (e.g., USCYBERCOM Advanced Operator Course [AOC], CNOQC, or commercial equivalents) or experience performing penetration testing and exploit analysis.
• Version Control & CI/CD: Experience utilizing GitLab for source control, automated testing, and CI/CD deployment pipelines.
• Mission Support Experience: Prior experience supporting U.S. Space Force Defensive Cyberspace Operations for Space (DCO-S) missions or USCYBERCOM / Cyber National Mission Force (CNMF) teams.
• Cloud & Classified Environments: Experience defending or deploying within DoD cloud environments at Secret, Top Secret, or SAP/SAR classification levels.
• Advanced Degree: Master of Science in Computer Science, Computer Engineering, or Cyberspace Operations.
• Industry & DoD Certifications:
• Forensics / Malware / CTI: GIAC Reverse Engineering Malware (GREM), GIAC Certified Forensic Analyst (GCFA), GIAC Cyber Threat Intelligence (GCTI), Recorded Future Certified Analyst.
• Offensive / Exploit Research: GIAC Exploit Researcher & Advanced Penetration Tester (GXPN), GIAC Red Team Professional (GRTP), GIAC Penetration Tester (GPEN), GIAC Web Application Penetration Tester (GWAPT).
• Defense & Infrastructure: GIAC Defending Advanced Threats (GDAT), CompTIA Security+.
• DoD / USCYBERCOM Work Roles: Certification as a Malware Analyst, Basic Cyber Operator (BCO), Cyber Operations Planner, or Mission Commander.

• Work Environment: Secure Compartmented Information Facility (SCIF) and operational cyber operations center environment.
• Travel: Occasional CONUS travel may be required (approximately 10-15%) to support integrations, or threat response.

The pay range for this position is $180,000/year to $220,000/year; however, base pay offered may vary depending on established government contract ranges, job-related knowledge, skills, and experience, and other factors. MTSI offers a full range of medical benefits, 401k, ESOP, paid time off, and other benefits, dependent on the position offered. Base pay information is based on market location. Applications will be accepted on an ongoing basis. This posting will be renewed periodically until the position is filled.