Cyber Security Engineer - By Light Professional IT Services

By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.

Cole Engineering Services (CESI), a By Light company, is recognized as a premier provider of modeling and simulation (M&S) training solutions to the Federal Government and industry. Since 2004, CESI has been at the forefront of developing, maintaining, and integrating simulation-based training, serious gaming, technical services, training and other support in live, virtual, constructive, and gaming (LVCG) domains. CESI also designs, builds and runs infrastructure, platforms, applications and processes that enable cyber training for the integrated multi-domain force. Our vision is to become a worldwide full spectrum LVCG and cyber training/analysis developer, integrator and services provider.

Provide cybersecurity engineering support to DoD software application development activities through cybersecurity requirements definition, process enhancements and application security testing activities.

• Define cybersecurity requirements for software applications to meet program requirements and objectives.
• Provide recommendations to incorporate security engineering practices throughout the system development lifecycle.
• Perform assessments of cybersecurity requirement compliance using manual and automated software analysis tools and methods and present them to the customer as necessary.
• Perform assessments using adversarial tools, techniques, and methods against network-enabled applications and web applications to identify weaknesses, gaps, and vulnerabilities.
• Propose mitigation and countermeasures to reduce or eliminate software-level threats.
• Directly interface with the software development team to ensure software security engineering principles are applied throughout the system development lifecycle.
• Provide technical leadership and mentorship to junior cybersecurity engineers, fostering skill development, adherence to cybersecurity best practices, and continuous learning.
• Bachelor's Degree in Computer Science, Engineering, Cybersecurity, IT or related field required.
• Professional and / or military experience may be substituted in lieu of degree.
• Experience in software engineering, development and/or systems engineering throughout all phases of the system development lifecycle.
• Systems administration skills, experience with Linux, security settings, services, hardening of systems (STIGs, security policies); any shell scripting or Python a plus.
• System troubleshooting, recovery, and advisory in the event of unexpected adverse configuration changes.