Cybersecurity Engineer, Lead

Founded in 2001, Indigo IT is an award-winning information technology consulting and services company. We are a trusted services provider to government agencies seeking innovative Cloud, Cybersecurity, Knowledge Management, and Enterprise solutions. We know our defense, federal, and civilian customers have critical IT infrastructures that must remain reliable, available, and maximized. Indigo IT is mission focused and committed to maintaining a sense of urgency in anticipating and supporting our customers’ technology goals and objectives.

Our unique ability to think beyond today allows our clients to stay ahead of their IT challenges. Recognized on the Inc. 5000 list of America’s fastest growing companies in 2020, 2021, and named as one of the 2022 Best Places to Work in Virginia, we are always looking to hire top talent in the field - come join us today!

As an integral member of the OIT End-User Device IT Management Services team, the Cybersecurity Engineer Lead will be responsible for ensuring vulnerability and configuration compliance of programs, applications, updates, and security patches throughout the enterprise of Windows and MacOS desktops, laptops, and tablets. This team member will develop security measures for the protection of data, systems, and networks. Investigate and respond to vulnerability and compliance issues.

Develop SOPs to ensure good and sound IT practices during the building/testing/deployment/analysis of software packages in the environment.

• Supports the execution of the Risk Management Framework (All facets, especially Continuous Monitoring).
• Participates in and leads as required Security Assessment & Authorization (SA&A) activities.
• Performs conformance testing to assess whether a system complies with defined specifications or standards (system and application baselines).
• Assist other team members with the test bed environment to test and verify hardware and support peripherals to ensure that they meet specifications and requirements by recording and analyzing test data.
• Create auditable evidence of security measures.
• Assist with conducting and monitoring Independent Validation and Verification (IV&V) testing for software applications and systems.
• Advise appropriate senior leadership or authorizing official of charges affecting the organization's information assurance posture.
• Collect and maintain data needed to meet system information assurance reporting.
• Coordinate with team members to ensure that information assurance inspections, tests, and reviews are coordinated for the environment.
• Perform operational security tasks as assigned to include incident handling and analysis and prepare appropriate reports to keep senior leadership informed.
• Utilize existing security tools in place to perform RMF continuous monitoring activities
• Ability to analyze port, protocol, and network traffic information to make intelligent decisions regarding the real-time information security posture of the organization.
• Adhere to the information assurance requirements which are integrated into the continuity planning for that system and/or organization(s).
• Support corporate business development by providing subject matter expertise in the development of proposals, white papers, and requests for information as needed.

• Advanced or Expert knowledge and/or work experience in:
• Information Certification & Accreditation Regulations, Federal Information Security Management Act (FISMA), and National Institute of Standards and Technology (NIST) guidance.
• Ability to Identify, collect, process, document, and report cyber security/incident response events.
• Developing and implementing cyber security/incident response policies and procedures; engineering, testing, installing, patching, and upgrading various information security hardware and software applications
• Contingency plan creation, modification, and testing.
• Zero Trust Implementation and environment
• Experience with Tenable Nessus, Security Center, Tanium (or similar tools).
• Experience with SPLUNK or other SEIM.
• Experience with ISVM, Security Patch/Patches, Vulnerabilities, Configuration (STIGs), and GPO/Group Policy.
• Experience with CISA KEV list and implementation deadlines
• Operations-based testing scenarios.
• Ability to recommend improvements to internal processes to maximize customer service levels and improve overall security posture of the organization.
• Excellent time management skills, with ability to juggle…