Cybersecurity Engineer, Principal (ISSE) in New York at Jobgether

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Cybersecurity Engineer, Principal (ISSE) based in the United States.

This senior cybersecurity role will provide information system security engineering expertise for a mission-critical Air Force modernization program.
You will help protect systems and data throughout their lifecycle while ensuring alignment with federal cybersecurity and risk management requirements.
The position combines secure engineering, security control assessment, continuous monitoring, incident readiness, and authorization support.
You will collaborate closely with security professionals, architects, developers, and common control stakeholders to address complex cybersecurity risks.
A major focus will be maintaining strong security posture through the Risk Management Framework, NIST guidance, and continuous monitoring practices.
You will also contribute to secure development practices, automated security testing, compliance documentation, and corrective action management.
This is a high-impact opportunity for a seasoned cybersecurity professional supporting a critical government technology environment.

• Provide cybersecurity and information system security engineering support in accordance with applicable Department of War and Air Force cybersecurity requirements.
• Assess, monitor, and manage cybersecurity risks while ensuring adherence to the Risk Management Framework (RMF), Cybersecurity Framework (CSF), NIST guidance, and Information Security Continuous Monitoring (ISCM) strategies.
• Implement security controls using secure engineering principles, secure coding practices, and established cybersecurity standards.
• Coordinate cybersecurity activities with Information System Security Managers, Information System Security Officers, Information Security Officers, system architects, common control providers, and other stakeholders.
• Maintain required cybersecurity certifications and ensure compliance with applicable Air Force policies and technical guidance.
• Support Authority to Operate (ATO), Authority to Connect (ATC), and Plan of Action and Milestones (POA&M) activities, including tracking and resolving corrective actions.
• Develop and maintain ISCM strategies while continuously monitoring systems and environments for relevant changes and security events.
• Assess configuration and system changes to determine their potential cybersecurity impact.
• Evaluate the effectiveness and performance of security controls and identify areas requiring remediation or improvement.
• Identify and report security-relevant events, system changes, and other conditions that could affect authorization or security posture.
• Ensure security documentation, evidence, and authorization artifacts remain accurate, complete, and current.
• Support security and privacy training and awareness activities, including ensuring appropriate training and certifications for Information System Security Officers and privileged users.
• Validate and analyze security testing results using automated tools such as Fortify, Checkmarx, SonarQube, and AppScan.
• Support cybersecurity software development activities and integrate security practices throughout the development lifecycle.
• Ensure information technology is properly acquired, documented, operated, maintained, and ultimately disposed of in accordance with applicable government requirements.

• U.S. citizenship is required.
• Bachelor’s degree in a related field with at least 10 years of experience in the relevant technical or professional discipline.
• Active T3/Secret security clearance that can be maintained throughout employment.
• Demonstrated experience providing cybersecurity guidance in areas including access control, configuration management, system and communications protection, contingency planning, incident handling, and system and information integrity.
• Experience performing cybersecurity responsibilities in accordance with DoWI 8500.01, AFI 17-130, and AFI 17-1301.
• Experience supporting security and privacy training, awareness programs, and cybersecurity-related software development activities.
• Experience validating, evaluating, and analyzing automated security testing results using tools such as Fortify, Checkmarx, SonarQube, or AppScan.
• Experience working with Department of War tracking and security systems such as Jira, HP ALM, and eMASS.
• Experience conducting Information Security Continuous Monitoring (ISCM) activities.
• Ability to assess security controls, analyze system changes, identify risks, and support RMF and authorization processes.
• Must meet DCWF Information Systems Security Developer (631) principal-level certification requirements, including FITSI FITSP-D as required, with GIAC GCSA and/or (ISC)² CISSP-ISSEP credentials as applicable.
• Strong understanding of cybersecurity engineering, secure development, risk management, security controls, and compliance frameworks.
• Ability to collaborate effectively with technical and security stakeholders across multiple functions.
• Strong documentation, analytical, communication, and problem-solving skills.
• Ability to work independently while managing complex cybersecurity activities and competing priorities.
• Certified Scrum Master or other Agile certifications are preferred.
• Working knowledge of Agile development methodologies is preferred.
• Experience with Checkmarx, SonarQube, Mavin, Fortify, Jira, Confluence, and Bitbucket is a plus.

• Full-time position supporting a mission-critical government technology program.
• Remote work opportunity based in the United States.
• Primary work location associated with Kettering, Ohio.
• Limited travel requirement of approximately 0–10%.
• Opportunity to work on cybersecurity engineering, secure development, continuous monitoring, and authorization activities supporting a major federal program.
• Exposure to advanced cybersecurity frameworks, automated security testing tools, Agile development environments, and government security processes.
• Opportunity to collaborate with experienced cybersecurity, engineering, architecture, and program stakeholders.
• High-impact work focused on protecting critical systems and maintaining strong cybersecurity and compliance standards.