Cyber Security Engineer

$145,000 - $160,000/Yr

Unclassified - Washington, DC

Full-time

Washington, DC

About the position

We are seeking a Cybersecurity Engineer to join our client's team in Washington, DC. This role encompasses responsibilities in both Security Operations and Engineering to secure customer cloud computing, data center, and on-premise environments. The successful candidate will manage various security solutions, develop and maintain security policies and procedures, and perform incident response and business continuity testing. This position offers a hybrid work model after a probationary period, allowing for flexibility in work arrangements while ensuring that security standards are upheld across all platforms. The Cybersecurity Engineer will be responsible for ensuring adherence to security standards and acting as the point of contact for planning, developing, testing, and implementing IT security controls. This includes maintaining and documenting system security baselines, developing and executing information security plans and policies, and creating strategies and procedures to respond to, recover from, and investigate security breaches. The role also involves implementing and managing open-source and third-party tools for threat detection, prevention, and analysis, as well as installing, configuring, and updating firewalls, data encryption, and other security products. In addition, the Cybersecurity Engineer will conduct periodic network scans to identify and remediate vulnerabilities, monitor networks and systems for security breaches using intrusion detection software, and perform penetration testing and threat hunting activities. Analyzing security issues and responding to security incidents will be a critical part of the role, ensuring that the organization remains secure against evolving threats.

Responsibilities

• Ensure adherence to security standards.
• Act as the point of contact for planning, developing, testing, and implementing IT security controls.
• Maintain and document system security baselines.
• Develop and execute information security plans and policies.
• Develop strategies and procedures to respond to, recover from, and investigate security breaches.
• Implement and manage open-source and third-party tools for threat detection, prevention, and analysis.
• Install, configure, and update firewalls, data encryption, and other security products.
• Conduct periodic network scans to identify and remediate vulnerabilities.
• Monitor networks and systems for security breaches using intrusion detection software.
• Perform penetration testing and threat hunting activities.
• Analyze security issues and respond to security incidents.

Requirements

• 9+ years of industry experience in an Information Security role with a degree, or 12+ years without a degree.
• Bachelor's degree or equivalent experience.
• Experience with Palo Alto (preferred) or Cisco firewall, network security appliance administration, and cloud security.
• Experience with vulnerability scanners and management, preferably Tenable Nessus and Qualys.
• Fundamental knowledge of Windows and Linux (RHEL) operating systems, network traffic analysis, and security events.
• Experience with RMF, A&A, IV&V, and continuous monitoring.
• Knowledge of security baselines and controls (CIS Benchmark, DISA STIG, NIST 800-53).
• Experience with log aggregation/SIEM tools such as Splunk or similar.
• Ability to support and provide artifacts for annual audits and ATO review processes (FISMA, FISCAM, etc).
• Up-to-date knowledge of adversarial techniques and incident response procedures.
• Technical understanding of network operations, server architectures, storage solutions, and desktop hardware/software.
• Strong communication skills with peers, supervisors, and senior leadership.
• Decision-making skills to assess situations, determine importance, urgency, risks, and make timely decisions.
• AWS and Azure experience.
• CISSP, CISA, PCNSE certification.

Benefits

• Top of the line benefits package