Cyber Security Engineer

Overview

Millennium is proud to be part of the Markon enterprise, a network of specialized organizations united in support of critical national security missions. This partnership strengthens our ability to deliver results by expanding our technical depth, operational reach, and access to a broader bench of proven experts, ensuring our customers continue to receive best-in-class cybersecurity support.For more than two decades, Millennium has operated at the forefront of cybersecurity. Our elite team of over 300 professionals brings an unmatched record of performance across Red Team Operations, Defensive Cyber Operations, Software Engineering, and Technical Engineering. As home to the largest contingent of contracted Red Team operators supporting the Department of Defense, Millennium delivers unparalleled threat intelligence and battle-tested expertise to both DoD and federal civilian customers.

What We Believe

Millennium is an equal opportunity employer and does not discriminate or allow discrimination on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state, or local law.

Responsibilities

Millennium Corporation is hiring a Cyber Security Engineer in Orlando, FL. ALL candidates MUST have an active secret clearance with TS/SCI eligibility to qualify for consideration.

Job Summary:

Provide cybersecurity engineering support to DoD software application development activities through cybersecurity requirements definition, process enhancements and application security testing activities.

Essential Job Functions:

· Define cybersecurity requirements for software applications to meet program requirements and objectives.

· Provide recommendations to incorporate security engineering practices throughout the system development lifecycle.

· Perform assessments of cybersecurity requirement compliance using manual and automated software analysis tools and methods and present them to the customer as necessary.

· Perform assessments using adversarial tools, techniques, and methods against network-enabled applications and web applications to identify weaknesses, gaps, and vulnerabilities.

· Propose mitigation and countermeasures to reduce or eliminate software-level threats.

· Directly interface with the software development team to ensure software security engineering principles are applied throughout the system development lifecycle.

· Provide technical leadership and mentorship to junior cybersecurity engineers, fostering skill development, adherence to cybersecurity best practices, and continuous learning

Required Skills:

· Experience in software engineering, development and/or systems engineering throughout all phases of the system development lifecycle.

· Systems administration skills, experience with Linux, security settings, services, hardening of systems (STIGs, security policies); any shell scripting or Python a plus.

· System troubleshooting, recovery, and advisory in the event of unexpected adverse configuration changes.

· Knowledge of threat assessment and solutions to mitigate or eliminate such threats.

· Experience with offensive security tools and adversarial techniques and methods.

· Experience implementing software application solutions to comply with NIST SP 800-53 security controls.

· Compliance and vulnerability reporting and similar formal technical documentation skills.

· Experience working with Cyber Range Environments.

· Understanding of Risk and Compliance Frameworks.

Qualifications

ALL candidates MUST have an active secret clearance with TS/SCI eligibility to qualify for consideration.

Required Education/Experience:

· Bachelor's Degree in Computer Science, Engineering, Cybersecurity, IT or related field required.

· Professional and / or military experience may be substituted in lieu of degree.

Required Certifications:

· This position requires certifications necessary to meet IAT Level II in accordance with DoD 8570 baseline certifications.

o IAT Level II certification is required immediately upon hire.

o Current certification status will be maintained by obtaining continuing education as specified by the certification authority.

Desired Skills:

· An understanding of DoD acquisition processes and relevant cyber security processes, such as the Risk Management Framework (RMF).

Desired Certifications: CISSP, OSCP, GPEN, GWAPT, GSSP, CEH

Business Development

• Assist with Business Development activities as required to support Millennium's strategic business objectives, which may include but not limited to participation in technical interviews, creation of technical documentation, general proposal writing support and proposal color reviews.

Physical Requirements

• Must be comfortable with prolonged periods of sitting at a desk and working on a computer.
• Must be able to lift up to 10-15 pounds at a time.

Travel Requirements

• 10% or less