Cyber Security Engineer

This role bridges security engineering and day to day operations by supporting implementation of security capabilities, evaluating technical solutions, maintaining cybersecurity tools, and helping operational teams translate security architecture into effective, repeatable practices. The Cybersecurity Engineer works closely with vulnerability management, incident response, RMF, and ISSO teams to ensure engineering activities directly support operational risk reduction and continuous improvement.

• Support design, configuration, integration, and validation of Zero Trust security capabilities.

• Perform technical reviews of system changes and identify security control, interoperability, and implementation impacts.

• Develop and validate test evidence, technical configuration records, and implementation artifacts.

• Support System Impact Analyses covering architectural, operational, and Assessment and Authorization implications.

• Assist with regression testing, architecture verification, troubleshooting, corrective actions, and technical acceptance preparation.

• Document reusable engineering lessons and recommend improvements to implementation patterns and technical procedures.
• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, Information Technology, or a related technical discipline.

• Three or more years of enterprise cybersecurity or systems engineering experience.

• Experience implementing and validating security controls across infrastructure, endpoints, identity, networks, applications, or cloud environments.

• Knowledge of NIST SP 800-53, RMF, and Zero Trust principles.

• Strong analytical, troubleshooting, testing, and documentation skills.

Preferred Qualifications:

• Experience supporting Federal FISMA systems.

• Experience producing implementation evidence and supporting ATO or continuous monitoring activities.

• Experience with enterprise security tooling and API-based integrations.

Preferred Certifications:

One or more of the following is preferred:

• Security+

• CySA+

• CISSP

• GSEC

• CCSP