Principal Cybersecurity Engineer

Position Summary

Odyssey Systems has an exciting opportunity for a Principal Cybersecurity Engineer providing support to the Air Force Life Cycle Management Center-Ground Base Air Defense Sensor division (AFLCMC/ESG).

The ESG Division manages efforts focused on developing, acquiring, fielding and sustaining programs that support worldwide communications, Battle Management, Command & Control, Intelligence, Surveillance & Reconnaissance (C2ISR), Air/Ground Surveillance, Time Critical Targeting, Combat Identification, Radar Imagery, Integrated Air/Missile Defense, and Mobile/Fixed C2ISR Performance, Exploitation & Dissemination Facilities.

 This is a full-time position located at Hanscom Air Force Base in Bedford, Massachusetts.

Responsibilities

Duties include, but not limited to:

Cybersecurity & RMF Support

• Lead development and review of system security documentation including System Security Management Plans, Program Protection Plans, Security Risk Analyses, OPSEC Plans, and security CONOPS in accordance with DoDI 5000.02, DoDI 8510.01, MIL-STD-1785, and the Adaptive Acquisition Framework

• Support system and application Authorization & Accreditation (A&A) activities under the Risk Management Framework (RMF), ensuring completeness, quality, and compliance of all artifacts

• Manage RMF implementation activities including ATO/ATC, reciprocity, and ongoing continuous monitoring

• Administer and manage eMASS system packages

System, Network & Infrastructure Security

• Provide technical leadership in network and system architecture design with an emphasis on cybersecurity, including DoD and joint networking environments

• Support cross-domain solutions (CDS), Commercial Solutions for Classified (CSfC), and NSA approval processes

• Assess and mitigate system, network, and application vulnerabilities, including ACAS scanning and STIG implementation

• Recommend security configurations, software changes, and compensating controls to mitigate risk

Risk, Compliance & Policy

• Conduct cybersecurity risk and vulnerability assessments across planned and fielded systems

• Develop risk-based mitigation strategies and advise leadership on security tradeoffs impacting mission execution

• Recommend and update cybersecurity policies, procedures, and contingency plans, including disaster recovery

• Support waivers and deviations for mandated security controls when required to meet mission performance needs

Program Security & Classified Information Support

• Provide acquisition program security support throughout the system lifecycle, including source selections

• Maintain and audit classified information databases, visit records, clearance tracking, and classified holdings

• Evaluate contractor classified data submissions for compliance with System Security Classification Guides (SSCGs)

• Update security classification guides and prepare acquisition security documentation

Leadership, Collaboration & Training

• • Advise government leadership on cybersecurity design, implementation, and compliance
  • Collaborate with government and commercial stakeholders to achieve RMF authorization approvals
  • Develop and deliver cybersecurity awareness and training programs

Qualifications

Citizenship: Must be a US citizen

Minimum Required Qualifications

Clearance: Must have a be able to maintain a Top Secret Level Clearance

Education: BS/BA Degree

Years of Experience:20 years of directly related experience, 10 years of which must be in the DoD

• Risk Management Framework (RMF), with empasis on taking projects from Step 1 to Step 5
• Vulnerability Management, Tenable Nessus (ACAS-DoD version of Nessus)
• STIGs
• CISSP Certification 

Preferred Qualifications

• Experience with Cross Domain Solutions and USAF CDS-E
• Cloud Service Models
• Supply Chain Security
• NIAP
• DoD Policies for Procedures for Cybersecurity
• Network Security
• Endpoint
• DoD Impact Levels
• NSA Type 1 encryption
• Working with a CSSP - 16th AF

Additional Information:

Location: Hanscom Air Force Base

Onsite

#LI-KM1

# HB

Company Overview

Odyssey Systems is a world-class technical, engineering, and integration company serving the warfighting ecosystem with airborne integration, ISR, C2, and warfighter readiness capabilities. Odyssey meets the military’s operational needs by integrating layered defense systems from equipment, technology, and services to data, information, and business operations. We streamline defense acquisition and sustainment, engineering the technical battlefield with domain-specific proficiency to ensure lethality. Odyssey is dedicated to excellent contract execution, peak organizational performance, and fostering a workplace built on employee care.

Odyssey is proud to live out our core values of commitment, ambition, and respect in our work and communities through OdysseyCares, a philanthropic group focused on giving back through direct donations, an employer match program, and volunteering events.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

Please Note:

Final compensation for this position will be determined by various factors such as the Federal Government contract labor categories and contract wage rates, relevant work experience, specific skills and competencies, geographic location, education, and certifications.

This position is filled through continuous recruitment and will remain open until a sufficient pool of applications has been received.Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, Tricare supplement, short-term disability, long-term disability, 401(k) match, flexible spending accounts, health savings accounts, employee assistance program, learning and development benefit, paid time off, and holidays.Odyssey Benefits

Responsibilities

Duties include, but not limited to:
Cybersecurity & RMF Support
-
Lead development and review of system security documentation including System Security Management Plans, Program Protection Plans, Security Risk Analyses, OPSEC Plans, and security CONOPS in accordance with DoDI 5000.02, DoDI 8510.01, MIL-STD-1785, and the Adaptive Acquisition Framework

-
Support system and application Authorization & Accreditation (A&A) activities under the Risk Management Framework (RMF), ensuring completeness, quality, and compliance of all artifacts

-
Manage RMF implementation activities including ATO/ATC, reciprocity, and ongoing continuous monitoring

-
Administer and manage eMASS system packages

System, Network & Infrastructure Security
-
Provide technical leadership in network and system architecture design with an emphasis on cybersecurity, including DoD and joint networking environments

-
Support cross-domain solutions (CDS), Commercial Solutions for Classified (CSfC), and NSA approval processes

-
Assess and mitigate system, network, and application vulnerabilities, including ACAS scanning and STIG implementation

-
Recommend security configurations, software changes, and compensating controls to mitigate risk

Risk, Compliance & Policy
-
Conduct cybersecurity risk and vulnerability assessments across planned and fielded systems

-
Develop risk-based mitigation strategies and advise leadership on security tradeoffs impacting mission execution

-
Recommend and update cybersecurity policies, procedures, and contingency plans, including disaster recovery

-
Support waivers and deviations for mandated security controls when required to meet mission performance needs

Program Security & Classified Information Support
-
Provide acquisition program security support throughout the system lifecycle, including source selections

-
Maintain and audit classified information databases, visit records, clearance tracking, and classified holdings

-
Evaluate contractor classified data submissions for compliance with System Security Classification Guides (SSCGs)

-
Update security classification guides and prepare acquisition security documentation

Leadership, Collaboration & Training
-
- Advise government leadership on cybersecurity design, implementation, and compliance
- Collaborate with government and commercial stakeholders to achieve RMF authorization approvals
- Develop and deliver cybersecurity awareness and training programs