Cybersecurity Engineer, Lead

The Lead Cybersecurity Engineer role at Indigo IT focuses on vulnerability and configuration compliance for Windows and MacOS end-user devices. Working within the OIT End-User Device IT Management Services team, you will support RMF continuous monitoring and audit-ready security activities, while also developing procedures and generating auditable security evidence.

• Support execution of the Risk Management Framework across all facets, with emphasis on Continuous Monitoring
  .
• Participate in and lead Security Assessment & Authorization (SA&A) activities as required.
• Perform conformance testing to determine whether systems meet defined specifications, including system and application baselines.
• Assist team members using test bed environments to validate hardware and support peripherals against specifications, recording and analyzing test data.
• Create auditable evidence of implemented security measures.
• Support Independent Validation and Verification (IV&V) testing for software applications and systems, including conducting and monitoring testing activities.
• Advise senior leadership or the Authorizing Official on actions that affect the organization’s information assurance posture.
• Collect and maintain system information assurance reporting data.
• Coordinate with team members to ensure information assurance inspections, tests, and reviews are aligned for the environment.
• Perform operational security tasks as assigned, including incident handling and analysis, and prepare reports to keep senior leadership informed.
• Use existing security tools to perform RMF continuous monitoring activities.
• Analyze port, protocol, and network traffic information to support real-time decisions about organizational security posture.
• Adhere to information assurance requirements integrated into system and organizational continuity planning.
• Provide subject matter expertise to support corporate business development, including proposal development, white papers, and requests for information as needed.

This position includes collaboration with the end-user device management services team to support RMF continuous monitoring, SA&A, IV&V testing, and preparation of auditable security evidence.

• Current CBP Background Investigation or Top-Secret clearance adjudicated within the last 5 years (preferred).
• At least 5 years of hands-on experience detecting, monitoring, and remediating security issues across network, hardware, software, and platform security.
• Demonstratable experience performing compliance control testing, identifying and resolving cybersecurity issues, and developing remediation or mitigation strategies.
• Bachelor’s or master’s degree in Cybersecurity, Computer Science, Computer Information Systems, or Information Technology (master’s preferred).
• In lieu of a degree,
  10 years of hands-on experience in control testing, vulnerability identification and resolution, and recommendations to minimize cybersecurity risk will be considered.
• Must hold one or more certifications:
  ISC2 CISSP
  , EC-Council Certified Ethical Hacker
  , or CompTIA Security Analytics Expert (equivalent certifications may be considered).

• Windows, MacOS
• Tenable Nessus
• Security Center
• Tanium
• Splunk
• SEIM
• ISVM
• STIGs
• GPO/Group Policy
• CISA KEV list

• Advanced or expert knowledge and/or work experience in Information Certification & Accreditation regulations, FISMA, and NIST guidance.
• Ability to identify, collect, process, document, and report cyber security and incident response events.
• Experience developing and implementing cyber security and incident response policies and procedures, including engineering, testing, installing,…