Cybersecurity Engineer

Hexagon US Federal
Summary
Join Hexagon US Federal as a Cybersecurity Engineer III and lead cybersecurity strategy and operations for critical U.S. Department of Defense (DoD) programs. This leadership role requires overseeing the protection of sensitive systems and information in a complex environment. The ideal candidate will possess a strong cybersecurity background, proven independent work ability, and a Security+ certification (or higher). You will collaborate with various teams and stakeholders, ensuring compliance with DoD security standards and regulations. This dynamic opportunity offers diverse multidisciplinary projects and the chance to thrive in the integrated systems arena. The position involves continuous risk assessments, vulnerability scans, and penetration testing to mitigate potential threats.
Requirements
- Security+ certification (or higher) required (e.g., CISSP, CISM, etc.)
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience), or 5 or more years of DOD cybersecurity experience
- Strong working knowledge of DoD cybersecurity policies, regulations, and compliance frameworks (e.g., STIGs, NIST, RMF, FISMA)
- Hands-on experience with security tools and technologies (e.g., SIEM, vulnerability scanners, encryption, endpoint protection)
- Proven expertise in risk assessment, incident response, and security operations
- Experience working within a DoD or federal environment, with knowledge of applicable security protocols
- Strong Communication and presentation skills (written and oral)
- At a minimum, must complete and receive government National Agency Check status. Ability to receive a SECRET clearance
Responsibilities
- Oversee the cybersecurity strategy and operations to protect sensitive systems and information within a complex, high-stakes environment
- Ensure compliance with applicable cybersecurity frameworks and regulations, such as NIST 800-53, Risk Management Framework (RMF), and DoD 8570
- Coordinate with cross-functional teams to implement security solutions and ensure proper security controls are embedded throughout the lifecycle of systems and applications
- Collaborate with DoD stakeholders, including government and contractor personnel, to ensure seamless security integration and compliance
- Maintain and enhance the program’s cybersecurity posture by staying current with emerging cyber threats, technologies, and industry trends
- Provide technical guidance to multi-stakeholder team members while conducting continuous risk assessments, vulnerability scans, and penetration testing to identify and mitigate potential threats and vulnerabilities
- Develop trusted relationships with program stakeholders to influence and assist in product or solution realization tailored to their needs
- Ensure alignment with continuous monitoring, security assessment, and audit requirements outlined by the DoD
- Prepare and present security status reports to senior management and government stakeholders
- Develop and implement cybersecurity policies, procedures, and best practices in accordance with DoD requirements
- Interact with Program/Project Management, Manufacturing, Suppliers, and the Navy customer
Preferred Qualifications
- Working knowledge of Naval Sea Systems Command, Naval Surface Warfare Center, Naval Shipyard, or similar within the Navy
- Electronic IT equipment design and manufacturing including firmware, and trusted platform modules
- Familiarity with cloud security models (e.g., AWS, Azure, Oracle Cloud Initiative, Kubernetes), DevOps implementations and emerging cybersecurity technologies
- Knowledge of encryption standards and technologies, source code scanning and remediation process
- Experience with oversight of security infrastructure monitoring ensuring proactive threat detection, incident response, and remediation
- Administrative knowledge of processes for incident management, handling security breaches, and conducting post-incident analysis and reporting
Benefits
- Competitive health care plans with savings accounts
- Dental and vision plans
- 401k with 100% company match up to 6%, with immediate vesting on company match
- Life and disability insurance
- Learning Management System with robust offerings
- Tuition Reimbursement Program
- Flexible hybrid and remote working arrangements where possible
- 13 paid holidays per year
- Thrive Wellness Program
- DE&I and Veterans’ focused Employee Resources Groups with regular educational sessions and communications
- Leadership Development Program with multiple learning options