Cyber Security Engineer

GOV CIO is seeking a highly skilled Cybersecurity Engineer to design, implement, and sustain security capabilities that align with Zero Trust principles across AF IC mission systems. The Air Force Intelligence Community (AF IC) is advancing its enterprise cybersecurity posture through a comprehensive Zero Trust architecture. This role supports critical intelligence missions and requires strong collaboration with AF cyber, IT, and mission operations stakeholders. This position will be located at Hampton,Va.

• Engineer cybersecurity solutions aligned with Zero Trust architecture pillars: identity, devices, networks, applications/workloads, data, and analytics.
• Implement technical controls supporting continuous verification, micro-segmentation, and access enforcement.
• Support AF IC Zero Trust initiatives, including ICAM modernization, data tagging, and attribute-based access control.
• Integrate security tools and platforms such as SIEM, EDR, SOAR, identity providers, and boundary security systems.
• Develop and maintain security documentation: system security plans, architecture diagrams, configuration standards, and POA&Ms.
• Participate in and support AF and IC accreditation activities following NIST SP 800-53, CNSSI standards, and DoD cybersecurity requirements.
• Conduct security assessments, risk analyses, vulnerability scans, and remediation activities.
• Collaborate with enterprise architects, cloud engineers, and mission partners to design secure workflows and secure data flows.
• Evaluate emerging Zero Trust technologies and recommend adoption strategies to enhance AF IC mission resilience.

High School with 10+ years (or commensurate experience)

Required Skills and Experience

• Clearance Required: TS/SCI

• Experience in the AF Intelligence Community, Air Force ISR, 16th Air Force, or other IC mission organizations

• IAT III Level Certification, CASP+/SecurityX, CCNP, CISA, CISSP, or CCSP

• Strong understanding of Zero Trust principles, frameworks, and DoD Zero Trust Strategy.

• Hands-on experience with security operations, vulnerability management, identity security, or network security.

• Familiarity with NIST RMF, NIST SP 800-53, DoD Cloud SRG, and IC security guidelines.

• Experience with security tools such as Splunk, ArcSight, Elastic, CrowdStrike, Tanium, or similar.

Preferred Skills and Experience

• Background in DevSecOps, automation, or IaC tools such as Terraform, Ansible, or Kubernetes.
• Experience engineering solutions involving data tagging, cross-domain systems, or ABAC enforcement.

#NSS

#DL

#TLM