Sr IT Security Engineer

San Antonio, Texas

Top Secret w/ SCI

On-site only

Information Technology

Overview

GovCIO is currently hiring for an IT Security Engineer Senior to support the 16AF/AF IC zero trust initiative. This position will be located at Joint Base San Antonio, Lackland and will be an onsite position.

Responsibilities

This position will support Air Force Intelligence Community mission systems in the implementation, assessment, and continuous monitoring of cybersecurity requirements. The engineer will lead Risk Management Framework activities, develop and tailor security controls, strengthen cloud security architectures, and advance Zero Trust capabilities across classified and unclassified environments. The role requires strong knowledge of federal, DoD, Air Force, and Intelligence Community cybersecurity policies and the ability to translate them into practical engineering and compliance outcomes.

• Lead and support RMF activities, including system categorization, control selection, implementation, assessment, authorization, and continuous monitoring.

• Develop, tailor, document, and validate security controls and implementation statements using NIST, DoD, Air Force, and Intelligence Community requirements.

• Prepare and maintain System Security Plans, Security Assessment Reports, Plans of Action and Milestones, risk assessments, and authorization packages.

• Advise program managers, system owners, ISSOs, ISSMs, engineers, and Authorizing Officials on cybersecurity risks and remediation strategies.

• Assess cloud architectures and services for compliance with security, privacy, identity, logging, encryption, data protection, and boundary requirements.

• Support Zero Trust implementation, including identity-centric access control, least privilege, device trust, segmentation, continuous verification, and data-centric security.

• Conduct security control assessments, vulnerability reviews, configuration assessments, and continuous monitoring activities.

• Coordinate remediation of findings and track risks through closure or formal risk acceptance.

• Support security architecture reviews, system design assessments, and mission-impact analyses.

• Develop cybersecurity documentation, briefings, risk reports, and executive-level recommendations.

Qualifications

Required Skills and Experience

Clearance: TS/SCI

High school diploma with 9+ years’ experience in cybersecurity, computer science, information systems, engineering, or a related discipline.

• Eight or more years of information security or cybersecurity engineering experience, including significant federal, DoD, Air Force, or Intelligence Community work.

• Must possess and maintain active certification that meets DOD 8570 IAT III in lieu of DoD 8140 job code 633 System Security Engineer.

• Understanding of systems security design and engineering principles.

• Knowledge of cybersecurity and zero trust reference architectures.

• Strong understanding of SIEM systems.

• Strong understanding of security for cloud-based platforms and applications.

• Excellent communication skills (spoken and written).

• Experience creating security workflows and diagrams based on system architecture.

• Understanding of Model Based Systems Engineering and the correlation to cybersecurity.

• Demonstrated experience executing RMF activities for moderate- or high-impact systems.

• Strong working knowledge of NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, and applicable DoD or Intelligence Community cybersecurity guidance.

• Experience developing, tailoring, implementing, and assessing security controls.

• Experience preparing authorization packages and working with system owners, ISSOs, ISSMs, security assessors, and Authorizing Officials.

• Practical knowledge of cloud security architectures, including identity and access management, encryption, logging, network security, configuration management, and secure service deployment.

• Knowledge of Zero Trust principles and architectures, including identity, device, application, network, and data protection.

• Ability to analyze technical and operational risks and communicate findings clearly to technical and executive audiences.

Preferred Skills and Experience

• Experience supporting Air Force, Space Force, DoD, and/or Intelligence Community systems and mission applications.

• Experience with classified environments, cross-domain solutions, high-side/low-side architectures, and compartmented or mission-partitioned systems.

• Experience with FedRAMP, DoD Cloud Computing Security Requirements Guide, IL4/IL5/IL6 environments, or comparable cloud authorization processes.

• Experience implementing Zero Trust using identity governance, privileged access management, micro segmentation, endpoint detection and response, security analytics, and continuous diagnostics.

• Familiarity with CNSSI 1253, ICD 503, DoD RMF guidance, Air Force cybersecurity policy, and applicable Intelligence Community directives.

• Experience with cloud platforms such as AWS, Microsoft Azure, or Google Cloud.

• Experience with GRC and security tools such as eMASS, ServiceNow GRC, Archer, Tenable, ACAS, SCAP, Splunk, Microsoft Sentinel, or comparable platforms.

• Experience performing security architecture reviews, threat modeling, attack-surface analysis, and control inheritance analysis.

• Experience leading technical teams, mentoring junior security personnel, or briefing senior government stakeholders.

#NSS

#AR

Posted Salary Range

USD $140,000.00 - USD $160,000.00 /Yr.

Company Overview

GovCIO is a team of transformers--people who are passionate about transforming government IT. Every day, we make a positive impact by delivering innovative IT services and solutions that improve how government agencies operate and serve our citizens.

But we can't do it alone. We need great people to help us do great things - for our customers, our culture, and our ability to attract other great people. We are changing the face of government IT and building a workforce that fuels this mission. Are you ready to be a transformer?

What You Can Expect

Interview & Hiring Process

If you are selected to move forward through the process, here’s what you can expect:

• During the Interview Process

• Virtual video interview conducted via video with the hiring manager and/or team

• Camera must be on

• A valid photo ID must be presented during each interview

• During the Hiring Process

• Enhanced Biometrics ID verification screening

• Background check, to include:

• Criminal history (past 7 years)

• Verification of your highest level of education

• Verification of your employment history (past 7 years), based on information provided in your application

Employee Perks

At GovCIO, we consistently hear that meaningful work and a collaborative team environment are two of the top reasons our employees enjoy working here. In addition, our employees have access to a range of perks and benefits to support their personal and professional well-being, beyond the standard company offered health benefits, including:

• Employee Assistance Program (EAP)

• Corporate Discounts

• Learning & Development platform, to include certification preparation content

• Training, Education and Certification Assistance*

• Referral Bonus Program

• Internal Mobility Program

• Pet Insurance

• Flexible Work Environment

*Available to full-time employees

Our employees’ unique talents and contributions are the driving force behind our success in supporting our customers, which ultimately fuels the success of our company. Join us and be a part of a culture that invests in its people and prioritizes continuous enhancement of the employee experience.

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, disability, or status as a protected veteran. EOE, including disability/vets.

Posted Pay Range

The posted pay range, if referenced, reflects the range expected for this position at the commencement of employment, however, base pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, education, experience, and internal equity. The total compensation package for this position may also include other compensation elements, to be discussed during the hiring process. If hired, employee will be in an “at-will position” and the GovCIO reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, GovCIO or individual department/team performance, and market factors.