Job Description
Job Description
McBride Consulting has an exciting opportunity for a Senior Cybersecurity Engineer providing support to the Air Force Life Cycle Management Center-Ground Base Air Defense Sensor division (AFLCMC/ESG).
The ESG Division manages efforts focused on developing, acquiring, fielding and sustaining programs that support worldwide communications, Battle Management, Command & Control, Intelligence, Surveillance & Reconnaissance (C2ISR), Air/Ground Surveillance, Time Critical Targeting, Combat Identification, Radar Imagery, Integrated Air/Missile Defense, and Mobile/Fixed C2ISR Performance, Exploitation & Dissemination Facilities.
This is a full time position located at Hanscom AFB, Bedford, MA.
Responsibilities:
Duties include, but not limited to:
- Assist with the installation, configuration, and maintenance of ACAS components, including Nessus scanners, SecurityCenter/Tenable.sc, and Nessus Network Monitor (NNM)/Tenable.asm.
- Assist in scheduling and executing vulnerability scans using Nessus scanners.
- Analyze scan results to identify vulnerabilities, and misconfigurations.
- Direct DISA STIG-based configuration hardening across multi-classification networks
- Assist with compliance assessments against DoW standards and internal security policies.
- Generate reports on vulnerability status, compliance posture, and remediation progress.
- Collaborate with system administrators to facilitate vulnerability remediation efforts.
- Assist with system administration tasks for ACAS servers and databases.
- Manage cybersecurity incident reporting and conduct root‑cause analysis
- Develop corrective action plans and maintain POA&Ms
- Stay up to date on the latest vulnerability trends and security threats.
Requirements
Qualifications:
Citizenship: Must be a US citizen
Minimum Required Qualifications
Clearance: Must have and be able to maintain an Active Secret clearance
- CISSP Certification
Preferred Qualifications
Education: Bachelor’s degree in a professional engineering discipline from an ABET-accredited educational program and at least 10-15 years of experience in the respective technical/professional discipline, 10 of which must be in the DoD.
-
Understanding of cybersecurity in DoD cloud infrastructure.
-
Knowledge of Agile methodologies including CI/CD, DevSecOps, and DevOps.
- Experience with systems analysis and eMASS
-
Strong ability to communicate technical topics effectively in both written and verbal forms.
Technical Skills
- STIG compliance
-
Risk Management Framework (RMF) implementation and documentation.
-
DoD cybersecurity policies and compliance.
-
System Authorization and Accreditation (A&A) processes.
-
DoD cloud infrastructure security.
-
Agile development methods including CI/CD, DevSecOps, and DevOps.
-
Security risk, vulnerability, and contingency planning.
-
PKI management and access control.
-
Classified material handling and accountability.
Interpersonal Skills
-
Strong verbal and written communication skills for both technical and non-technical audiences.
-
Ability to collaborate with government, contractor, and industry stakeholders.
