Job Number: 753

External Description:

Phalanx Griffon (PG) is a toppriority, openarchitecture airborne node that stitches warfighter data into the DAF BATTLE NETWORK . As Senior Cybersecurity Specialist , you will be the program's authority on securing Nomad hardware, Smith software, and Watch operations throughout Major Release 2 (FY 2527) . Your zerotrust designs, continuousATO tooling, and crossdomain safeguards will decide when PG can fly-and fight-in contested environments.

Essential Job Functions

Cyber Strategy & Governance

Own the PG Cybersecurity Strategy, System Security Plan (SSP), and Plan of Action & Milestones (POA&M) . Align all efforts with NIST 80053, CNSSI 1253, and Air Force ZeroTrust Reference Architecture. Chair cyber risk boards; brief metrics & burndowns to SES/GO stakeholders. RMF & Continuous ATO Lead the PG Risk Management Framework (RMF) process from categorization through authorization; shepherd artifacts in eMASS. Stand up automated compliance scans (ACAS, SCAP, Nessus, Tanium) integrated with the DevSecOps pipeline; deliver continuousATO dashboards. Secure DevSecOps & SupplyChain Risk Embed SBOM analysis, container hardening, and codesigning into Smith's 90day software release cadence. Evaluate thirdparty components for supplychain threats; drive mitigations and waivers. CrossDomain & Crypto Engineering Develop guard rulesets and dataflow enforcement for MultiLevel Security (MLS) crossdomain solutions. Coordinate Type1 crypto keymanagement plans with NSA; author KOV11 / SKL handling procedures. Vulnerability Management & Incident Response Conduct penetration tests and redteam exercises on Integration SIL builds; track findings to closure. Draft and rehearse PGspecific incidentresponse / huntforward playbooks for Watch operations. Platform & FlightTest Support Generate "cyber annexes" for AF Form 1067s, SafetyofFlight packages, and Interim Authorizations To Test (IATT). Deploy secure configs on flight hardware; provide onsite cyber assurance during ground & flight events. Mentorship & Culture Coach engineers on securebydesign principles, STIG implementation, and zerotrust concepts. Foster a DevSecOps, failfast mindset inside classified environments.

Required Skills:

Due to the sensitivity of customer related requirements, U.S. Citizenship is required.

B.S. in Cybersecurity, Computer Science, Information Systems, or related field (M.S. preferred) and 12 + years securing DoD or IC C4ISR/avionics systems; at least 5 years as the lead cybersecurity engineer or ISSM.

Active TS/SCI clearance.

Handson mastery of RMF, NIST 80053, DISA STIGs, SCAP/ACAS , and eMASS workflows.

Experience designing or accrediting crossdomain solutions and Type1 crypto architectures.

Working knowledge of container security, IaC (Ansible/Terraform), and DevSecOps pipelines (Platform One, Iron Bank).

Desired Skills:

DoD 8570/8140 IAM/IASAE Level III certification (CISSPISSEP, CISM, GSLC, etc.).

Prior involvement in ABMS, CJADC2, OMS/UCI, or tactical datalink programs.

Familiarity with zerotrust enforcement for SATCOM, SDR, and softwaredefined networking environments.

Redteam / pentest credentials (OSCP, GXPN, CEH) and experience authoring mitigations.

Agile/Scrum or SAFe certification.

Job Number: 7119

Community / Marketing Title: Senior Cybersecurity Engineer (CSSE)

Location_formattedLocationLong: Dayton, OH, Ohio US