Cybersecurity Security Engineer III

NewGen Technologies Inc. has been addressing complex IT challenges for over 20 years, focusing on integrity, security, and exceptional service. They are seeking a Cybersecurity Security Engineer III to support a government opportunity, responsible for leading cybersecurity engineering teams and developing security architectures and risk management plans.

Responsibilities:

• US Citizenship and eligibility for a Secret Clearance
• Experience with developing/integrating cybersecurity designs for systems and networks
• Experience implementing Zero Trust Architecture (ZTA) principles
• Experience developing and producing strategic technology roadmaps aligned with mission requirements
• Experience conducting market research analysis on new cybersecurity tool technologies
• Experience performing technical evaluations and Proof of Concepts for cybersecurity objectives
• Experience with documenting and addressing organizational information security, cybersecurity architecture, and systems security engineering requirements
• Experience with developing system security context, a preliminary system security CONOPS, and define baseline system security requirements in accordance with applicable cybersecurity requirements
• Experience documenting the protection needs (i.e. security controls) for information system(s) and network(s)
• Ability to perform security reviews, identify gaps in security architecture, and develop a security risk management plan
• Ability to develop a system security context, a preliminary system security CONOPS, and define baseline system security requirements in accordance with applicable cybersecurity requirements
• Experience with securing at least one of the following Cloud Service Provider (CSP) types: Infrastructure as a Service (IaaS), Software as a Service (SaaS), and Platform as a Service (PaaS)
• Experience or knowledge of integrating cybersecurity principles with Artificial Intelligence (AI) or GenerativeAI (GenAI)
• Experience providing support for the integration of security into the DevSecOps pipeline activities
• Experience with vulnerability scanning tools to include those supporting operation system, web application, database assessments
• Skill in translating operational requirements into protection needs (i.e. security controls)
• Work experience or knowledge with architecting, engineering, deploying, and tuning of Network Detection and Response (NDR) platforms
• Experience or knowledge of network modeling and behavior technology solutions
• Experience or working knowledge of Cyber Threat Intelligence (CTI) technologies
• Experience or knowledge of Security Orchestration, Automation, and Response (SOAR) solutions
• Work experience or knowledge of Security Information & Event Management (SIEM)
• Mobile security engineering knowledge or experience to include at least one of the following: Mobile Threat Detection (MTD), Mobile Device Management (MDM) security controls, Mobile Application Management (MAM) security controls
• Work experience or knowledge of providing technical security engineering support for secure authentication
• Work experience or knowledge integrating of secure authentication / Single SignOn (SSO)
• Work experience or knowledge of Post Quantum Cryptography (PQC) concepts and technology, which may include any of the following: Extensive experience with certificate lifecycle management, cryptographic algorithms (RSA, ECC, AES), digital signatures, and cryptographic principles, including emerging post-quantum encryption standards (e.g., NIST PQC algorithms)
• Experience using tools and technologies to enable discovery of cryptographic assets across enterprise networks using network and infrastructure telemetry data
• Experience with requirements gathering to prototype, develop, validate, and build systems to support quantum-ready encryption
• Experience implementing technologies and associated roadmaps to create new telemetry for cryptographic inventorying
• Experience designing, implementing, and evaluating PQC-enabled network protocols for different layers of the OSI model, e.g., PQC-enabled TLS
• Solid understanding of various protocols like TLS, X.509, BGP, DHCP, IPsec, DNSsec, etc
• At least 2 years of experience working with network packet capture tools like WireShark, tcpdump, nmap, or similar
• Proven experience scripting and automating administrative functions (PowerShell, Python)

Requirements:

• US Citizenship and eligibility for a Secret Clearance
• Bachelor's Degree in Computer/Engineering Science, Information Systems, Cybersecurity, or related field OR 10 years of work experience in Cybersecurity engineering
• A minimum of 10 (additional) years of work experience in Cybersecurity engineering and/or cybersecurity project management
• 2+ years of leadership experience managing Cybersecurity engineering teams
• At least one of the following: CISSP, CCSP, CCNA, CISSP-ISSAP, CISSP-ISSEP, GIAC, SSCP, Security+ (or equivalent as approved by the Government)
• Experience with developing/integrating cybersecurity designs for systems and networks
• Experience implementing Zero Trust Architecture (ZTA) principles
• Experience developing and producing strategic technology roadmaps aligned with mission requirements
• Experience conducting market research analysis on new cybersecurity tool technologies
• Experience performing technical evaluations and Proof of Concepts for cybersecurity objectives
• Experience with documenting and addressing organizational information security, cybersecurity architecture, and systems security engineering requirements
• Experience with developing system security context, a preliminary system security CONOPS, and define baseline system security requirements in accordance with applicable cybersecurity requirements
• Experience documenting the protection needs (i.e. security controls) for information system(s) and network(s)
• Ability to perform security reviews, identify gaps in security architecture, and develop a security risk management plan
• Ability to develop a system security context, a preliminary system security CONOPS, and define baseline system security requirements in accordance with applicable cybersecurity requirements
• Experience with securing at least one of the following Cloud Service Provider (CSP) types: Infrastructure as a Service (IaaS), Software as a Service (SaaS), and Platform as a Service (PaaS)
• Experience or knowledge of integrating cybersecurity principles with Artificial Intelligence (AI) or GenerativeAI (GenAI)
• Experience providing support for the integration of security into the DevSecOps pipeline activities
• Experience with vulnerability scanning tools to include those supporting operation system, web application, database assessments
• Skill in translating operational requirements into protection needs (i.e. security controls)
• Work experience or knowledge with architecting, engineering, deploying, and tuning of Network Detection and Response (NDR) platforms
• Experience or knowledge of network modeling and behavior technology solutions
• Experience or working knowledge of Cyber Threat Intelligence (CTI) technologies
• Experience or knowledge of Security Orchestration, Automation, and Response (SOAR) solutions
• Work experience or knowledge of Security Information & Event Management (SIEM)
• Mobile security engineering knowledge or experience to include at least one of the following: Mobile Threat Detection (MTD), Mobile Device Management (MDM) security controls, Mobile Application Management (MAM) security controls
• Work experience or knowledge of providing technical security engineering support for secure authentication
• Work experience or knowledge integrating of secure authentication / Single SignOn (SSO)
• Work experience or knowledge of Post Quantum Cryptography (PQC) concepts and technology, which may include any of the following: Extensive experience with certificate lifecycle management, cryptographic algorithms (RSA, ECC, AES), digital signatures, and cryptographic principles, including emerging post-quantum encryption standards (e.g., NIST PQC algorithms), Experience using tools and technologies to enable discovery of cryptographic assets across enterprise networks using network and infrastructure telemetry data, Experience with requirements gathering to prototype, develop, validate, and build systems to support quantum-ready encryption, Experience implementing technologies and associated roadmaps to create new telemetry for cryptographic inventorying, Experience designing, implementing, and evaluating PQC-enabled network protocols for different layers of the OSI model, e.g., PQC-enabled TLS, Solid understanding of various protocols like TLS, X.509, BGP, DHCP, IPsec, DNSsec, etc
• At least 2 years of experience working with network packet capture tools like WireShark, tcpdump, nmap, or similar
• Proven experience scripting and automating administrative functions (PowerShell, Python)
• Candidates in the Chandler, AZ area are preferred