Cybersecurity Engineer SME

What you'll do

• Design, configure, and maintain security technologies including firewalls, endpoint protection tools, and SIEM platforms like Splunk.
• Monitor network security to detect, analyze, and respond to potential threats or anomalous activities.
• Investigate and remediate cybersecurity incidents such as system breaches and malware infections.
• Audit systems and configurations to ensure compliance with established policies and secure configuration baselines.
• Integrate security controls into DevSecOps pipelines and system architectures in collaboration with engineering teams.
• Manage vulnerability management programs by reviewing scan results, assessing risk, and coordinating remediation efforts.
• Track and manage Plans of Action and Milestones (POA&Ms) for customer-sponsored systems.
• Support the Risk Management Framework (RMF) process to provide risk-based recommendations for Authority to Operate (ATO) activities.

What we're looking for

• Must possess an active TS/SCI security clearance with a polygraph.
• Requires a Master's degree and 15 or more years of relevant experience, or equivalent experience in lieu of a degree.
• Must hold professional cybersecurity certifications such as Security+, CISSP, CySA+, CEH, or GCIH.
• Experience implementing and managing SIEM tools like Splunk to monitor network security and detect threats.
• Experience with endpoint and network security technologies including IDS/IPS and HBSS/Trellix.
• Experience supporting incident response, vulnerability management programs, risk management plans, and POA&Ms.
• Experience supporting the Risk Management Framework (RMF) authorization process and Authority to Operate (ATO) activities.
• Experience collaborating with DevSecOps teams to integrate security controls into pipelines and system architectures.