Cybersecurity Engineer

Job Summary

BMA is seeking a Cybersecurity Engineer (CE) to support the DLA Cybersecurity Technology Support contract. The CE provides specialized cybersecurity engineering support to the DLA J61 Cybersecurity Technology Group to assist with the integration, sustainment, and operational support of enterprise cybersecurity technologies. The CE applies information assurance and cybersecurity engineering principles to analyze security requirements, resolve technology and workflow issues, and support the planning, design, development, testing, demonstration, and integration of cyber systems across the enterprise.

The CE supports a broad portfolio of cybersecurity platforms, with particular emphasis on Web Application Firewall technologies and related enterprise cybersecurity tools. This role supports the implementation, configuration, maintenance, and continuous improvement of systems used to protect DLA information systems, applications, and infrastructure in accordance with DoD and DLA cybersecurity requirements. The CE works closely with DLA cybersecurity personnel, system administrators, network engineers, tool owners, and mission stakeholders to ensure cybersecurity technologies are properly engineered, maintained, tested, documented, and aligned with operational and compliance requirements.

• Provide security engineering support for the planning, design, development, testing, demonstration, and integration of cybersecurity technologies supporting the DLA Cybersecurity Technology Group.
• Analyze IA and cybersecurity requirements and apply systematic engineering approaches to resolve technical and operational issues.
• Support integration of cybersecurity tools, applications, appliances, sensors, and platform-related hardware and software across the enterprise.
• Evaluate system workflows, technical configurations, and operational processes to improve efficiency, reliability, and security.

• Support the sustainment and operational engineering of F5 BIG-IP Application Security Manager and related WAF technologies protecting DLA websites and web applications.
• Work with DLA website stakeholders to gather requirements and develop, configure, test, deploy, and maintain WAF policies.
• Support patching, upgrades, preventive maintenance, bug fixes, firmware updates, and maintenance releases for WAF environments.
• Assist in tuning and optimizing WAF functionality to improve security effectiveness and reduce operational risk.

• Analyze existing and emerging DLA information systems and IT infrastructure to assess compliance with DoD and Federal IA policy.
• Review system design documentation, proposed policies, and draft changes to identify areas of non-compliance and recommend remediation actions.
• Support Security Test and Evaluation, IA assessments, and technical reviews to validate compliance with cybersecurity requirements.
• Develop and document implementation standards, security engineering guides, and supporting procedures for cybersecurity tools and environments.

• Support operational integration and sustainment of cybersecurity platforms used by DLA, including technologies related to WAF, GRC workflow, SIEM/ELM, IDS/IPS, vulnerability management, insider threat, UBA, and comply-to-connect capabilities.
• Assist with troubleshooting, maintenance, configuration changes, and technical analysis of cybersecurity toolsets and associated infrastructure.
• Support test environments and production deployments to ensure systems are stable, secure, and operationally effective.
• Provide technical recommendations for product enhancements, lifecycle management, and implementation improvements.

• Prepare implementation documentation, system test results, SOPs, technical reports, and engineering recommendations.
• Support development of training materials, technical briefings, and user guidance for cybersecurity tools and engineering processes.
• Document deficiencies, corrective actions, system changes, and engineering recommendations.
• Support reporting.

There is a Secret Security clearance requirement for this position.

• Current DoD 8670.01/8140 IAT Level III certification that includes one or more of the following: ISACA CISM, ISC2 Certified Information Systems Security Professional (CISSP), GIAC/SANS GIAC Security Leadership Certification (GSLC), or…