Cyber Security Engineer Lead

Cyber Security Engineer Lead

Starting Pay Rate - Up to $75 / hr

6-12 months contract to hire

Located in Kings Point, NY

Hybrid (Some days in office, Some remote)

Public Trust Required

The candidate will lead, design, implement, and maintain the company's cybersecurity governance, compliance efforts, and overall security posture. Responsibilities include managing ATO packages, RMF documentation, SSP / POA&M development, Zero Trust initiatives, account lifecycle controls, BYOD governance, and risk management. They will conduct vulnerability scanning, review alerts, perform incident response, and monitor enterprise security events. They will also coordinate patching, evaluate software requests, and maintain secure system configurations. The role leads cybersecurity briefings, Awareness Bulletins, Sea Year presentations, and Indoc training, and participates in cyber governance meetings such as Cyber Ops, CAM, vulnerability reviews, Change Control Board, and daily coordination with Academy IT leadership. Ensures alignment with NIST CSF, NIST 800-53, FISMA, DOT, and MARAD requirements to support mission readiness and secure operations.

Job Responsibilities :

• Ensure compliance with NIST CSF and RMF to maintain accreditation and protect system confidentiality, integrity, and availability
• Provide strategic and tactical security guidance, recommending technical and administrative controls
• Direct and mature the Incident Response Program, including triage, escalation, documentation, and after-action improvements
• Administer enterprise security policies, maintain SOPs / checklists, and drive continuous monitoring and process enhancements
• Lead threat and vulnerability management : scanning, pen-test coordination, risk scoring, and remediation tracking
• Conduct threat landscape assessments, business impact analyses, and risk treatment recommendations
• Oversee development of cybersecurity procedures (International Travel, BYOD, secure communications)
• Manage recurring reviews of SSPs, POA&Ms, annual security plans, account audits, and risk acceptance packages
• Serve as primary cybersecurity liaison to DOT, MARAD, auditors, and federal oversight entities
• Support Zero Trust Architecture and broader security architecture modernization
• Lead quarterly and biannual IR tabletop exercises and integrate lessons learned
• Coordinate ITSEC team training and cross-functional knowledge sharing
• Maintain security documentation, templates, policies, and recurring reports (Awareness Bulletins, POA&M dashboards, CSAM reporting)

Skills Required :

Skills Preferred :