Cybersecurity Engineer Lead

Job Description

Department Marketing Statement :

The Cybersecurity Engineering (CE) Program Lead reports to the Information System Security Manager (ISSM) for Engineering and serves as the lead Information System Security Engineer (ISSE), responsible for designing and implementing secure architectures across hybrid cloud and legacy system environments.

This role blends cybersecurity engineering with modern systems architecture¿building, securing, and optimizing resilient enterprise platforms that integrate on-premises infrastructure, legacy systems, and multi-cloud environments using security-by-design principles.

The CE Program Lead will :

• Lead NIST Risk Management Framework (RMF) implementation across cloud and legacy systems.
• Collaborate with engineering teams, IT service owners, and cloud architects to ensure compliance and interoperability.
• Mentor junior engineers in secure architecture design.

Support the ISSM in addressing cybersecurity, privacy, and compliance challenges throughout Metro¿s enterprise systems

Minimum Qualifications

Education

In lieu of a Bachelor¿s degree, a High School Diploma or GED and four (4) years of experience as a cybersecurity engineer or Information System Security Engineer / Officer (ISSO / ISSE), having supported cybersecurity engineering and / or penetration testing.

Experience

ADDITIONAL CRITERIA FOR PROGRESSION

Medical Group

Satisfactorily complete the medical examination for this position, if required. The incumbent must be able to perform the essential functions of this position either with or without reasonable accommodations.

Job Summary

The Cybersecurity Engineer - Lead is responsible for determining system security requirements. The engineer also designs the security layout or architecture of a system or network and determines required security tools and existing tool functionality. The employee implements system security by ensuring that the entire system works as planned. This includes testing and documenting the entire system. Through penetration testing, or ethical hacking, the engineer is required to conduct formal tests on web-based applications, networks, and other types of computer systems on a regular basis and is expected to conduct regular security audits from both a logical and theoretical standpoint and a technical, hands-on standpoint, resulting on written reports and action plans.

Additional Criteria for Progression :

Essential Functions

The essential duties listed are not intended to limit specific duties and responsibilities of any particular position. Nor is it intended to limit in any way the right of managers and supervisors to assign, direct and control the work of employees under their supervision.

Evaluation Criteria

Consideration will be given to applicants whose resumes demonstrate the required education and experience. Applicants should include all relevant education and work experience.

Evaluation criteria may include one or more of the following :

Closing

WMATA is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, disability, status as a protected veteran, or any other status protected by applicable federal law.

This posting is an announcement of a vacant position under recruitment. It is not intended to replace the official job description. Job descriptions are available upon confirmation of an interview.