Cyber Security Engineer

The work

The Cybersecurity Engineer is responsible for the ongoing design, implementation, monitoring, and maintenance of security systems that protect networks, applications, and data from evolving cyber threats. This role conducts regular security assessments—including audits, penetration testing, and vulnerability scanning—to identify weaknesses and drive remediation. The engineer monitors for anomalies, investigates incidents, applies patches and configuration updates, and maintains incident response plans to ensure operational resilience and business continuity. The role also develops, updates, and enforces security policies, standards, and procedures aligned with industry best practices, while partnering closely with engineering teams, ISSOs, assessors, and other stakeholders to strengthen the organization’s security posture.

Key responsibilities:

• Design, implement, and maintain security systems and data protection measures
• Conduct regular security audits, penetration tests, and vulnerability assessments
• Monitor systems for anomalies, investigate security incidents, and apply necessary patches or configuration changes
• Develop and maintain incident response plans to ensure business continuity
• Create, update, and enforce security policies, standards, and operating procedures
• Write clear and accessible documentation for both technical and non‑technical audiences
• Facilitate discussions across engineering teams, ISSOs, assessors, and technical stakeholders
• Review and interpret architecture documentation and design diagrams
• Apply knowledge of cloud, networking, IAM, logging, and security control concepts
• Leverage version control, CI/CD pipeline concepts, and vulnerability management workflows
• Support tracking of security findings from discovery through remediation
• Contribute to federal security compliance activities, including ATO lifecycle and POA&M management
• Participate in Scrum and Agile team activities

Here’s what you need:

• Ability to write clear security and compliance documentation
• Strong facilitation and stakeholder‑management skills
• Ability to read and discuss architecture documentation and diagrams
• Basic understanding of cloud, networking, IAM, security, and logging concepts
• Familiarity with version control, CI/CD, and vulnerability management workflows

Preferred qualifications:

• Experience tracking security findings from vulnerability scanning through remediation
• Hands‑on experience with federal security compliance, including the ATO lifecycle and POA&M management
• Experience participating in Scrum activities

Eligibility requirements:

• U.S. Citizenship required
• Must have active Top Secret clearance