Cyber Security Engineer

What you'll do

• Design, configure, and maintain security technologies including firewalls, endpoint protection tools, and SIEM platforms.
• Monitor network security using Splunk to detect, analyze, and respond to potential threats or anomalous activity.
• Support the investigation and remediation of cybersecurity incidents, including system breaches and malware infections.
• Audit systems and configurations to ensure compliance with established cybersecurity policies and secure baselines.
• Integrate security controls into DevSecOps pipelines and system architectures in collaboration with engineering teams.
• Manage vulnerability management activities by reviewing scan results and coordinating remediation efforts with technical teams.
• Support the Risk Management Framework (RMF) authorization process by reviewing security documentation and providing risk-based recommendations.
• Manage and track Plans of Action and Milestones (POA&Ms) for customer-sponsored systems.

What we're looking for

• MS degree and 15 or more years of prior relevant experience, or additional years of experience in lieu of a degree.
• Must have an active TS/SCI with a Polygraph.
• Experience implementing and managing SIEM tools such as Splunk or similar platforms.
• Experience with endpoint and network security technologies including IDS/IPS, HBSS/Trellix, or Carbon Black EDR.
• Experience reviewing and analyzing cybersecurity event logs to identify indicators of compromise or suspicious activity.
• Experience supporting incident response plans, vulnerability management programs, risk management plans, and Plans of Action and Milestones (POA&Ms).
• Experience conducting or supporting technical cybersecurity assessments and security audits.
• Experience supporting the Risk Management Framework (RMF) authorization process and applying system security engineering principles.
• Professional cybersecurity certifications such as Security+, CISSP, CySA+, CEH, or GCIH.
• Experience with tools such as Rapid7, Tenable/Nessus, SonarQube, Fortify, Chainguard, or EDR platforms (preferred).
• Experience with automation tools such as Ansible or CloudFormation (preferred).
• Experience with Agile software development and scripting languages such as Python or PowerShell (preferred).
• Familiarity with cloud computing environments including AWS, Oracle Cloud, or GCP (preferred).
• Experience with DevSecOps pipelines, CI/CD security tools, and Linux environments (preferred).