Information Systems Security Manager/Engineer

Job Title: Cybersecurity Engineer

Work Location: Wright-Patterson AFB - Dayton, OH (Remote)

Labor Category: Exempt

Clearance Requirement: Secret - As required

Salary: $130,000-$175,000

Travel Requirement: 25%

At Tlingit Haida Tribal Business Corporation (THTBC), your work goes beyond the job description-it becomes part of a purpose-driven legacy. Our continuous commitment to growth directly contributes to the strength, resilience, and future of the communities we support. Our growth fuels programs, services, and lasting value for the Tribe, making every success a shared one.

For over 35 years THTBC and its subsidiaries has delivered essential services to federal clients across the globe. Whether supporting logistics, information technology, cyber security, or facilities operations, we are united by a shared mission: to create meaningful economic opportunity and growth of the Tlingit & Haida Tribes of Alaska.

Together We Grow - One Mission, One Team - With a Commitment to Serve

Scope of Work:

This position is in support of the sustainment and modification of the United States Air Force (USAF) Electronic Technical Information Management System (ETIMS) program. The primary purpose of this position is to support the ETIMS mission by ensuring all systems, applications, and processes comply with Department of Defense (DoD), Air Force (AF), and federal cybersecurity requirements. The role ensures cybersecurity requirements are integrated into information systems and components through deliberate security design, development, and configuration, in alignment with frameworks such as the Risk Management Framework (RMF) and NIST standards.

Responsibilities:

• Serving as a subject matter expert in security architecture to include providing advice to Program Managers, Customer technical experts, and internal program teams.

• Ensure all products, deliverables, and activities align with Federal, CNSS, DoD, and AF cybersecurity policies, including:
  • NIST SP 800-37, 800-53, 800-171
  • CNSSI 1253
  • DoD 8500-series and DoDI 8510.01 (RMF for DoD IT)
  • AFI 17-series publications and DoD 8140 workforce requirements
• Integrate cybersecurity considerations into Continuous Integration/Continuous Deployment (CI/CD) methodologies and program management schedules.
• Identify, manage, verify, and trace security controls across the entire system lifecycle, ensuring alignment with Test & Evaluation (T&E) and overall risk management processes.
• Implement and document comprehensive cybersecurity assurance measures across all layers of the TCP/IP model (network, transport, application, data link, and physical).
• Develop and maintain RMF documentation and artifacts, including Security Plans, Vulnerability Assessments, and Test Results, to support system authorization.
• Ensure compliance with DoDI 8520.02 (PKI and PK Enabling) and DoDI 8520.03 (Identity Authentication), maintaining standardized encryption, digital signature, and authentication mechanisms.
• Deliver secure applications compliant with DISA STIGs and Cloud One cybersecurity requirements.
• Conduct static application security testing (SAST) using PMO-approved tools and maintain a Software Bill of Materials (SBOM) for each release (e.g., SPDX, CycloneDX, SWID).
• Apply secure coding standards (e.g., OWASP Top Ten, CERT) and ensure prompt remediation of vulnerabilities.
• Generate and provide cybersecurity testing reports, mapping findings to applicable STIG and Cloud One controls.
• Use automated tools and processes wherever practical, seeking PMO approval for any deviations.
• Perform other duties as assigned.

Minimum Requirements:

• Seven (7) years of experience supporting DoD or Air Force cybersecurity programs.
• Compliant with DoDI 8140 Intermediate Level Certifications (Security+, CySA, CAP, CASP CE, CISM, CISSP or Associate)
• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field.
• Strong knowledge of NIST RMF, DoD 8500-series, and DISA STIG compliance.
• Experience with SAST, SBOM tools, and secure software development practices.
• Experience supporting AF programs or Cloud One environments.
• Familiarity with CI/CD security integration and automated compliance tools.
• Advanced certification (e.g., CASP+, CCSP, or CISSP-ISSAP) preferred.
• Must be able to satisfactorily obtain and maintain a government security clearance as required by the contract.
• Must be able to maintain ability to access government worksite.
• Must possess and maintain a valid state driver's license and a safe driving record, in accordance with company policy, to operate vehicles or equipment as required for the position.

Physical Demands / Work Environment:

• Ability to sit or stand for extended periods while working at a computer or desk.
• Frequent use of hands for typing, data entry, and handling paperwork.
• Must be able to work on-call, alternate, and extended shift schedules when necessary to meet the mission requirements, including weekends and holidays.

All candidates must successfully complete pre-employment screening, which may include but is not limited to a criminal background check, motor vehicle record review, and a 5-panel drug test, in accordance with company policy and applicable laws.

Benefits:

We offer a flexible benefits package including medical, dental, and vision plans, TRICARE Supplemental, critical illness coverage, employee discounts, wellness seminars, company-paid life and short-term disability insurance, optional long-term disability, paid leave, a 401(k) plan, and identity theft protection to support your health and financial well-being. For represented positions, the benefits and leave offered will be as defined under the applicable Collective Bargaining Agreement.

Equal Employment Opportunity:

We are proud to be an equal opportunity employer and comply with all applicable federal, state, and local employment laws. All applicants will be considered for employment without regard to race, color, religion, creed, national origin, gender, gender identity, age, marital status, sexual orientation, veteran status, disability, pregnancy, parental status, or any other characteristic protected by law.

Reasonable Accommodation:

If you have a disability or medical condition and need reasonable accommodation, please inform the designated recruiter during the hiring process.