Principal Cybersecurity Engineer

What you'll do

• Design, configure, and maintain security technologies including firewalls, endpoint protection tools, and SIEM platforms.
• Monitor network security using Splunk to detect, analyze, and respond to potential threats or anomalous activity.
• Support the investigation and remediation of cybersecurity incidents, including malware infections and network breaches.
• Audit systems and configurations to ensure compliance with established cybersecurity policies and secure baselines.
• Integrate security controls into DevSecOps pipelines and system architectures in collaboration with engineering teams.
• Manage vulnerability management activities by reviewing scan results and coordinating remediation efforts with system owners.
• Support the Risk Management Framework (RMF) authorization process and provide risk-based recommendations for ATO activities.
• Manage and track Plans of Action and Milestones (POA&Ms) for customer-sponsored systems.

What we're looking for

• Must have a BS degree and relevant experience, or an MS degree and relevant experience.
• Must have an active TS/SCI with a Polygraph.
• Must hold a professional cybersecurity certification such as Security+, CISSP, CySA+, CEH, or GCIH.
• Must have experience implementing and managing SIEM tools like Splunk and endpoint security technologies like HBSS/Trellix or Carbon Black EDR.
• Must have experience supporting incident response, vulnerability management, risk management plans, and Plans of Action and Milestones (POA&Ms).
• Must have experience supporting the Risk Management Framework (RMF) authorization process and conducting technical cybersecurity assessments.
• Must have experience applying system security engineering principles including cryptography, authentication, and configuration management.
• Experience with automation tools like Ansible, scripting languages like Python, or cloud environments like AWS is preferred.