Cybersecurity Engineer- CBP

Location:

Ashburn, VA (onsite)
Travel Requirement:
Less than 10%
Security Clearance:
Must possess existing DHS EOD or DHS Suitability

The Cybersecurity Engineer supports the U.S. Customs and Border Protection (CBP) Operational Technology Operations Center (OTOC) and the build-out, integration, and operation of the Office of Information and Technology (OIT) ISS OTOC. This position will provide cybersecurity engineering, vulnerability management, incident response (IR), risk assessment, and Risk Management Framework (RMF) support for complex operational technology (OT) and mission systems.

This role is intended for a cybersecurity professional who can operate at the intersection of mission requirements, OT, systems engineering, software, infrastructure, and cybersecurity. The engineer will be responsible for translating operational and technical requirements into practical security requirements, identifying and assessing vulnerabilities, determining security and mission risk, and helping engineering and program teams make informed decisions throughout the system lifecycle.

The successful candidate will bring strong experience in vulnerability management, IR, and cybersecurity engineering, combined with a working knowledge of RMF, Authorization to Operate (ATO) processes, cybersecurity requirements, and mission/operational technology environments.

• Provide cybersecurity engineering support for the integration, deployment, authorization, and sustainment of complex OTOC operational technology and mission systems.
• Translate mission, operational, and system requirements into actionable cybersecurity requirements and secure system architectures.
• Evaluate system designs, architectures, configurations, interfaces, and dependencies to identify cybersecurity risks, vulnerabilities, and attack surfaces.
• Integrate cybersecurity requirements into system design, development, testing, integration, deployment, and sustainment activities.
• Provide cybersecurity engineering guidance for applications, data platforms, tactical communications systems, mission networks, and authorized effectors.
• Collaborate with cross-functional engineering teams to resolve cybersecurity issues while maintaining mission performance, system availability, interoperability, and operational requirements.

• Perform vulnerability identification, analysis, prioritization, remediation, and tracking across applications, infrastructure, networks, and operational technology environments.
• Assess vulnerabilities in the context of system architecture, mission impact, threat exposure, and operational risk.
• Analyze security findings and translate technical vulnerabilities into clear, actionable risk information for system owners, engineers, and program leadership.
• Develop and recommend risk mitigation strategies and work with engineering teams to implement appropriate security controls and corrective actions.
• Track security deficiencies and remediation activities through resolution, ensuring risks are appropriately mitigated, accepted, or otherwise managed.

• Support the identification, analysis, investigation, containment, remediation, and recovery of cybersecurity incidents affecting mission systems and operational technology environments.
• Collaborate with cybersecurity operations, engineering, and program teams to assess the technical and operational impact of security incidents and implement appropriate corrective actions.
• Support post-incident analysis and lessons learned, incorporating findings into vulnerability management, security controls, system architecture, and risk mitigation activities.
• Support…