Cybersecurity Engineer

Synergy Business Innovation & Solutions is a premier implementer of cutting-edge software solutions. Synergy brings the experience and expertise necessary to deliver capability that provides tangible ROI to our customers. Our core areas of expertise are in the fields of Digital Transformation, Cloud Solutions, SaaS and Low-Code/No-Code Solutions, Emerging Technologies, Data Analytics and Visualization, Information Assurance, and Business Process Re-Engineering.

Synergy offers its employees a generous portfolio of core and voluntary benefits including: group medical, dental, and vision insurance, company paid life, short-term, and long-term disability insurance, HSA, FSA, 401(k) with company match, PTO & Bonus Leave, 11 paid federal holidays, parental leave, tuition and training reimbursement, a referral bonus program, and well-being programs.

At Synergy, you'll be challenged and given the opportunity to grow in your career path. In fact, growth is such a big deal to us that we have career mentors available for every employee, company-funded certification opportunities, education reimbursement, and a general open-door policy so that you have support when you need it. Our team is eager to learn, fast-paced, and quality-driven.

If that sounds like you, Synergy has a position for you!

This position is designated as work-from-home.

Synergy Business Innovation & Solutions, Inc. is seeking a skilled Cybersecurity Engineer to protect and sustain a mission-critical enterprise application environment. The Cybersecurity Engineer will support the design, implementation, assessment, monitoring, and continuous improvement of cybersecurity controls for applications, infrastructure, integrations, and supporting Dev Sec Ops  processes.

The successful candidate will work collaboratively with system administrators, Dev Ops engineers, software developers, database administrators, program leadership, and customer security stakeholders to ensure systems are designed, deployed, operated, and maintained in accordance with applicable federal cybersecurity requirements. This position requires practical experience with security engineering, vulnerability management, secure configuration, risk management, application security, continuous monitoring, and assessment and authorization activities.

The ideal candidate can translate cybersecurity requirements into technically practical controls, identify and remediate security risks, prepare high-quality compliance documentation, and help delivery teams maintain a secure and resilient operational environment.

• Design, implement, validate, and maintain cybersecurity controls for enterprise applications, infrastructure, databases, integrations, and supporting platform services.
• Translate customer, regulatory, and organizational cybersecurity requirements into actionable technical requirements, system configurations, security procedures, and implementation plans.
• Support implementation of security controls aligned with the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF), NIST Special Publication (SP) 800-53, and other applicable federal security standards.
• Assess system architecture, data flows, interfaces, and application components to identify security risks, control gaps, and opportunities for security enhancement.
• Participate in secure architecture reviews, design reviews, code-review activities, change-control boards, and production-readiness reviews.
• Support implementation and management of identity, credential, and access-management controls, including least privilege, role-based access control, multifactor authentication, privileged access, and account lifecycle management.
• Evaluate and…