Senior Cybersecurity Engineer SME #4291

$143,230 - $200,000/Yr

GovCIO - Washington, DC

Full-time - Senior

Washington, DC

About the position

GovCIO is currently seeking a Senior Cybersecurity Engineer who will serve as a subject matter expert (SME) in security standards and best practices. This position is critical in ensuring the organization's cybersecurity posture is robust and resilient. The Senior Cybersecurity Engineer will regularly perform security audits and vulnerability analyses, providing comprehensive reports that assess the current security landscape and recommend improvements. The role involves assessing and recommending scalable, flexible, and resilient cloud architectures that incorporate IT security and safeguarding requirements, ensuring that the organization remains compliant with the latest security standards. In addition to conducting audits, the Senior Cybersecurity Engineer will develop best practices and security standards tailored to the organization’s needs. This includes suggesting and implementing improvements to the Cyber Security architecture, staying abreast of the latest security technologies and trends to enhance the organization's security posture. The engineer will also be responsible for recommending, installing, configuring, operating, and maintaining Government-approved IT security tools, such as RSA Archer, to support overall information assurance activities. The ideal candidate will possess a strong background in security engineering, particularly in cloud environments, and will have a proven track record of implementing security measures that protect sensitive information. The role requires a proactive approach to identifying potential vulnerabilities and implementing effective solutions to mitigate risks. The Senior Cybersecurity Engineer will work closely with various teams and stakeholders, ensuring that security measures align with organizational goals and compliance requirements.

Responsibilities

• Serve as the subject matter expert for security standards and best practices within the organization.
• Regularly perform security audits and vulnerability analyses, providing detailed reports.
• Assess and recommend scalable, flexible, and resilient cloud architectures that incorporate IT security and safeguarding requirements.
• Develop best practices and security standards for the organization.
• Suggest and implement improvements to the Cyber Security architecture.
• Stay updated with the latest security technologies and trends to enhance the organization's security posture.
• Recommend, install, configure, operate, and maintain Government-approved IT security tools, including RSA Archer, to support information assurance activities.

Requirements

• Bachelor's degree with 12+ years of security engineering experience or equivalent experience.
• At least 4 years of experience in security engineering within a cloud environment, specifically supporting AWS.
• Required certifications: AWS, CISSP, Scrum.
• Basic programming knowledge and proficiency in Linux, system administration, networking, and cloud technologies.
• Basic knowledge of penetration testing and proficiency in Tenable and equivalent products.
• Proficiency in static code analysis and understanding of DOD STIG/CIS Benchmark.
• Knowledge of IaaS, PaaS, and SaaS architectures.
• Excellent oral and written communication skills with customers, teams, and leadership.
• Strong planning and organizational skills, detail-oriented, decisive, and goal-oriented.

Nice-to-haves

• Desired certifications: Azure, Security+, GSEC, GPEN, CEH, or Pentest+.
• Proficiency in RMF and Well-Architected Framework.