Cyber Security Engineer

Labor Category:
Cyber Security Engineer

Position Title:

Cyber Infrastructure Support
Position Level: Level 1 – Subject Matter Expert
Salary:
Up to $ per year
Core

Hours:

9am to 4pm

Location:

Bethesda MD

Position Requires a Top Secret (TS/SCI) Clearance with a Polygraph.

Labor Category:
Cyber Security Engineer

Position Title:

Cyber Infrastructure Support
Position Level: Level 1 – Subject Matter Expert
Salary:
Up to $ per year
Core

Hours:

9am to 4pm

Location:

Bethesda MD

• Developmental (0-2 years’ experience)
• Full Performance (3-5 years’ experience)
• Senior (6-10 years’ experience)
• Expert (11-15 years’ experience)
• SME (16+ years’ experience)

Plan, implement, manage, monitor, and upgrade security controls and tools used to protect enterprise systems and networks, while identifying opportunities to automate repeatable operations tasks.

• Design, configure, implement, troubleshoot, and maintain security technologies such as firewalls (security groups), endpoint protection tools (HBSS/Trellix), SIEM platforms (Splunk). Monitor system and network security using Security Information and Event Management (SIEM) tools such as Splunk Enterprise Security to detect, analyze, and respond to potential threats or anomalous activity.
• Support the investigation and remediation of cybersecurity incidents, including system or network breaches and malware infections. Participate in change management processes to ensure system changes maintain security compliance and do not introduce new vulnerabilities.
• Audit systems and configurations to ensure compliance with established cybersecurity policies, standards, and secure configuration baselines.
• Collaborate with engineering, development, and operations teams to integrate security controls into Dev Sec Ops  pipelines and system architectures.
• Continuously monitor security advisories, bulletins, and industry threat intelligence to stay informed of current vulnerabilities, threats, and trends. Assist with the implementation and enforcement of secure system configurations and cybersecurity compliance requirements.
• Support vulnerability management activities by reviewing scan results, assessing risk, and coordinating remediation efforts with system owners and technical teams.

• Experience implementing and managing Security Information and Event Management (SIEM) tools such as Splunk or similar platforms. Experience working with endpoint and network security technologies, including IDS/IPS, HBSS/Trellix, and related defensive security tools.
• Experience reviewing and analyzing cybersecurity event logs to identify indicators of compromise or suspicious activity. Experience supporting incident response plans, vulnerability management programs, risk management plans, and Plans of Action and Milestones (POA&Ms).
• Experience conducting or supporting technical cybersecurity assessments and security audits. Experience identifying system vulnerabilities and instances of non-compliance with cybersecurity standards and regulatory requirements. Experience collaborating with Dev Sec Ops  teams to review vulnerability scan results and support remediation of findings.
• Experience supporting the Risk Management Framework (RMF) authorization process by reviewing security documentation and providing risk-based recommendations to stakeholders regarding system risk posture as part of Authority to Operate (ATO) activities. Manage and track Plans of Action and Milestones (POA&Ms) for customer-sponsored systems, coordinating with key stakeholders including ISSOs, ISSEs, ISSMs, and Security Control Assessors (SCAs).
• Experience applying system security engineering principles in areas such as system security design, lifecycle engineering, authentication and…