Cyber Security Engineer (R-00120)

Position Responsibilities

• Collaborate with internal and external stakeholders to ensure secure data gathering, processing and management. 
• Support implementation, integration, and sustainment of enterprise cybersecurity technologies and security services.
• Configure, maintain, and troubleshoot cybersecurity platforms supporting enterprise security operations.
• Assist with implementation of Zero Trust security principles across enterprise environments.
• Evaluate security architectures, technical designs, and proposed system changes to identify cybersecurity impacts and recommend improvements.
• Support deployment and integration of security tools used for monitoring, vulnerability management, endpoint protection, cloud security, identity management, and continuous diagnostics.
• Develop and maintain engineering documentation, standard operating procedures, configuration standards, and technical implementation guides.
• Support security engineering activities associated with cloud environments, hybrid infrastructure, and enterprise applications.
• Collaborate with RMF personnel to ensure engineering implementations satisfy security control requirements and support authorization activities.
• Support incident response and vulnerability management teams by implementing corrective actions, validating technical fixes, and improving defensive capabilities.
• Participate in technology evaluations, proof of concepts, and continuous improvement initiatives to enhance enterprise cybersecurity capabilities.
• Assist with troubleshooting complex security issues and coordinating corrective actions across technical teams.
• Analyze SQL statements, identify and help resolve potential performance issues for optimized database operations.
• Designing secure network architectures, conducting penetration testing, managing security tools (e.g., SIEM, IDS/IPS), and establishing security policies.
• Working with DevOps, IT, and software teams to integrate security into the development lifecycle (DevSecOps).
• Deep knowledge of network protocols, operating systems (Linux/Windows), cloud security (AWS/Azure/GCP), and scripting/programming languages (Python, Bash).
• Implement and uphold cloud data security technologies and best practices.
• Operate independently, demonstrating proactive problem-solving skills and attention to detail.
• Effectively communicate complex technical concepts through strong written and verbal skills. - Regularly report progress and security concerns to the Head of Security Engineering.

Position Requirements

• • Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, or a related technical discipline.
  • Three or more years of experience supporting enterprise cybersecurity engineering, systems engineering, or security operations.
  • Experience implementing or administering enterprise cybersecurity technologies.
  • Working knowledge of NIST Cybersecurity Framework, NIST SP 800-53, RMF, and Federal cybersecurity practices.
  • Experience supporting Windows and Linux server environments, enterprise networking, or cloud infrastructure.
  • Familiarity with security engineering concepts including Zero Trust, identity and access management, endpoint security, network security, and cloud security.
  • Strong analytical, troubleshooting, and technical documentation skills.
  • Experience with Microsoft Azure, AWS, or hybrid cloud environments.
  • Experience supporting enterprise security platforms such as Microsoft Defender, CrowdStrike, Tanium, Splunk, Cribl, Tenable, or similar technologies.
  • Experience supporting Continuous Diagnostics and Mitigation (CDM) initiatives.
  • Experience working within FISMA or RMF governed environments.One or more of the following is preferred:
  • Security+
  • CySA+
  • CISSP
  • GSEC
  • CCSP
  • Microsoft Certified: Azure Security Engineer Associate
  • AWS Certified Security Specialty