[filters_job_card.part_time] Cyber security [h1.location_city]

Cyber Security Engineer Lead

Kings Point, NY

% Hybrid

The candidate will lead, design, implement, and maintain the Academy's cybersecurity governance, compliance efforts, and overall security posture. Responsibilities include managing ATO packages, RMF documentation, SSP / POA&M development, Zero Trust initiatives, account lifecycle controls, BYOD governance, and risk management. They will conduct vulnerability scanning, review DOT / MARAD alerts, perform incident response, and monitor enterprise security events. They will also coordinate patching, evaluate software requests, and maintain secure system configurations. The role leads cybersecurity briefings, Awareness Bulletins, Sea Year presentations, and Indoc training, and participates in cyber governance meetings such as DOT Cyber Ops, CAM, vulnerability reviews, Change Control Board, and daily coordination with Academy IT leadership. Ensures alignment with NIST CSF, NIST -, FISMA, DOT, and MARAD requirements to support mission readiness and secure operations.

Job Responsibilities :

• Ensure compliance with NIST CSF and RMF to maintain accreditation and protect system confidentiality, integrity, and availability
• Provide strategic and tactical security guidance, recommending technical and administrative controls
• Direct and mature the Incident Response Program, including triage, escalation, documentation, and after-action improvements
• Administer enterprise security policies, maintain SOPs / checklists, and drive continuous monitoring and process enhancements
• Lead threat and vulnerability management : scanning, pen-test coordination, risk scoring, and remediation tracking
• Conduct threat landscape assessments, business impact analyses, and risk treatment recommendations
• Oversee development of cybersecurity procedures (International Travel, BYOD, secure communications)
• Manage recurring reviews of SSPs, POA&Ms, annual security plans, account audits, and risk acceptance packages
• Serve as primary cybersecurity liaison to DOT, MARAD, auditors, and federal oversight entities
• Support Zero Trust Architecture and broader security architecture modernization
• Lead quarterly and biannual IR tabletop exercises and integrate lessons learned
• Coordinate ITSEC team training and cross-functional knowledge sharing
• Maintain security documentation, templates, policies, and recurring reports (Awareness Bulletins, POA&M dashboards, CSAM reporting)

Skills Required :

Skills Preferred :

Candidates must be US Citizens