Cyber Security Engineer (Kings Point)

Cyber Security Engineer

Location : Kings Point, NY (Hybrid some days onsite, some remote)

Contingent Position | IT Information Security

Role Summary

The Cyber Security Engineer Lead will design, implement, and maintain the United States Merchant Marine Academys cybersecurity governance, compliance programs, and overall security posture. This role leads technical and administrative security efforts, including ATO lifecycle management, RMF documentation, SSP / POA&M development, vulnerability management, incident response, Zero Trust initiatives, and enterprise security monitoring. The position serves as the primary liaison to DOT, MARAD, auditors, and federal oversight bodies while ensuring continuous alignment with NIST CSF, NIST 800-53, FISMA, DOT, and MARAD cybersecurity requirements.

Key Responsibilities

• Ensure compliance with NIST CSF and RMF frameworks to maintain accreditation and protect system confidentiality, integrity, and availability.
• Lead the development, update, and management of ATO packages , RMF documentation , SSPs , POA&Ms , and risk management artifacts.
• Provide strategic and tactical security guidance, advising on both technical and administrative controls.
• Direct and mature the Incident Response Program , including triage, escalation, documentation, after-action reviews, and program improvements.
• Administer enterprise security policies, maintain SOPs / checklists, and drive continuous monitoring processes.
• Lead threat and vulnerability management , including scanning, penetration test coordination, risk scoring, and remediation tracking.
• Conduct threat landscape assessments, business impact analyses, and provide risk treatment recommendations.
• Oversee creation and updates of cybersecurity procedures, including International Travel, BYOD, and secure communications.
• Manage recurring reviews of SSPs, POA&Ms, annual security plans, account audits, and risk acceptance packages.
• Serve as primary cybersecurity liaison to DOT , MARAD , auditors, and federal oversight entities.
• Support Zero Trust Architecture initiatives and broader enterprise security modernization.
• Lead quarterly and biannual Incident Response tabletop exercises and incorporate lessons learned into program updates.
• Coordinate ITSEC team training and cross-functional security knowledge-sharing.
• Maintain security documentation, templates, policies, and recurring reports (Awareness Bulletins, POA&M dashboards, CSAM reporting).
• Review DOT / MARAD alerts, coordinate patching, evaluate software requests, and maintain secure system configurations.
• Deliver cybersecurity briefings, Awareness Bulletins, Sea Year presentations, and Indoc training; participate in cyber governance meetings such as DOT Cyber Ops, CAM, vulnerability reviews, and Change Control Board meetings.

Required Technical Skills

Preferred / Nice-to-Have Skills

Benefits (employee contribution) :

Health insurance

Health savings account

Dental insurance

Vision insurance

Flexible spending accounts

Life insurance

Retirement plan

All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.