Cyber Security Engineer (R-00120)

This role bridges security engineering and day to day operations by supporting implementation of security capabilities, evaluating technical solutions, maintaining cybersecurity tools, and helping operational teams translate security architecture into effective, repeatable practices. The Cybersecurity Engineer works closely with vulnerability management, incident response, RMF, and ISSO teams to ensure engineering activities directly support operational risk reduction and continuous improvement.

Position Responsibilities

• Collaborate with internal and external stakeholders to ensure secure data gathering, processing and management. 
• Support implementation, integration, and sustainment of enterprise cybersecurity technologies and security services.
• Configure, maintain, and troubleshoot cybersecurity platforms supporting enterprise security operations.
• Assist with implementation of Zero Trust security principles across enterprise environments.
• Evaluate security architectures, technical designs, and proposed system changes to identify cybersecurity impacts and recommend improvements.
• Support deployment and integration of security tools used for monitoring, vulnerability management, endpoint protection, cloud security, identity management, and continuous diagnostics.
• Develop and maintain engineering documentation, standard operating procedures, configuration standards, and technical implementation guides.
• Support security engineering activities associated with cloud environments, hybrid infrastructure, and enterprise applications.
• Collaborate with RMF personnel to ensure engineering implementations satisfy security control requirements and support authorization activities.
• Support incident response and vulnerability management teams by implementing corrective actions, validating technical fixes, and improving defensive capabilities.
• Participate in technology evaluations, proof of concepts, and continuous improvement initiatives to enhance enterprise cybersecurity capabilities.
• Assist with troubleshooting complex security issues and coordinating corrective actions across technical teams.
• Analyze SQL statements, identify and help resolve potential performance issues for optimized database operations.
• Designing secure network architectures, conducting penetration testing, managing security tools (e.g., SIEM, IDS/IPS), and establishing security policies.
• Working with DevOps, IT, and software teams to integrate security into the development lifecycle (DevSecOps).
• Deep knowledge of network protocols, operating systems (Linux/Windows), cloud security (AWS/Azure/GCP), and scripting/programming languages (Python, Bash).
• Implement and uphold cloud data security technologies and best practices.
• Operate independently, demonstrating proactive problem-solving skills and attention to detail.
• Effectively communicate complex technical concepts through strong written and verbal skills. - Regularly report progress and security concerns to the Head of Security Engineering.

Position Requirements

• • Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, or a related technical discipline.
  • Three or more years of experience supporting enterprise cybersecurity engineering, systems engineering, or security operations.
  • Experience implementing or administering enterprise cybersecurity technologies.
  • Working knowledge of NIST Cybersecurity Framework, NIST SP 800-53, RMF, and Federal cybersecurity practices.
  • Experience supporting Windows and Linux server environments, enterprise networking, or cloud infrastructure.
  • Familiarity with security engineering concepts including Zero Trust, identity and access management, endpoint security, network security, and cloud security.
  • Strong analytical, troubleshooting, and technical documentation skills.
  • Experience with Microsoft Azure, AWS, or hybrid cloud environments.
  • Experience supporting enterprise security platforms such as Microsoft Defender, CrowdStrike, Tanium, Splunk, Cribl, Tenable, or similar technologies.
  • Experience supporting Continuous Diagnostics and Mitigation (CDM) initiatives.
  • Experience working within FISMA or RMF governed environments.One or more of the following is preferred:
  • Security+
  • CySA+
  • CISSP
  • GSEC
  • CCSP
  • Microsoft Certified: Azure Security Engineer Associate
  • AWS Certified Security Specialty