Cybersecurity Engineer Security Clearance

Position: Cybersecurity Engineer with Security Clearance
Cybersecurity Engineer
Company:
Horizon Global Partners (HgP)
Division:
Defense & Aerospace Services (DAS)

Location:

Washington, DC (Hybrid)

Employment Type:

Full-Time
Clearance Requirement:
Public Trust Tier 2 (Active preferred; ability to obtain required)
Position Summary
Horizon Global Partners (HgP) is seeking a highly skilled Cybersecurity Engineer to support a Federal Government customer by designing, implementing, and maintaining enterprise security controls across cloud, network, endpoint, and identity environments. The successful candidate will help strengthen the organization’s cybersecurity posture by implementing Zero Trust Architecture, enforcing least-privilege access, supporting continuous monitoring, and responding to security threats in accordance with Federal cybersecurity standards.
This position requires experience with enterprise security operations, Identity and Access Management (IAM), cloud security, vulnerability management, SIEM/EDR/XDR platforms, and incident response within complex hybrid environments.
________________________________________
Position Responsibilities
Enterprise Security Engineering

• Design, implement, and maintain enterprise security controls aligned with NIST SP 800-53.

• Support Zero Trust Architecture implementation in accordance with NIST SP 800-207.

• Harden enterprise systems using secure configuration baselines and industry best practices.

• Implement network and environment segmentation to protect critical assets and limit lateral movement.
Identity & Access Management (IAM)

• Configure and administer enterprise Identity and Access Management (IAM) solutions.

• Implement Role-Based Access Control (RBAC), Privileged Access Management (PAM), and Multi-Factor Authentication (MFA).

• Enforce least-privilege access across cloud, network, and endpoint environments.

• Support Microsoft Entra , Active Directory, and enterprise identity providers.
Security Operations

• Configure, monitor, and maintain SIEM, EDR, and XDR platforms.

• Implement centralized logging, log correlation, and continuous security monitoring.

• Investigate security alerts and suspicious activity.

• Support security incident triage, containment, eradication, recovery, and forensic investigations.
Vulnerability Management

• Conduct vulnerability assessments and security risk analyses.

• Coordinate remediation efforts across servers, workstations, applications, and cloud environments.

• Support automated patch management and security update processes.

• Validate remediation activities and maintain compliance with organizational security standards.
Cloud Security

• Secure AWS and Microsoft Azure cloud environments.

• Configure cloud identity controls, workload protections, encryption, and security services.

• Support secure cloud integrations and hybrid architectures.

• Implement cloud security best practices and continuous monitoring.
Compliance & Governance

• Support compliance with:
o NIST SP 800-53
o NIST SP 800-207 (Zero Trust)
o NIST Risk Management Framework (RMF)
o FISMA

• Participate in audits, security assessments, risk mitigation activities, and authorization efforts.

• Develop and maintain security policies, standards, and Standard Operating Procedures (SOPs).
Documentation & Collaboration

• Maintain system security documentation, configuration baselines, and asset inventories.

• Perform Root Cause Analysis (RCA) following security incidents.

• Support formal change management processes and security impact analyses.

• Collaborate with cloud, network, endpoint, and application engineering teams to improve enterprise security.
________________________________________

Required Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field (or equivalent experience).

• Minimum 5 years of enterprise cybersecurity engineering experience.

• Experience implementing security controls aligned with NIST SP 800-53.

• Experience implementing Zero Trust Architecture in accordance with NIST SP 800-207.

• Strong experience with Identity and Access Management (IAM), RBAC, PAM, and MFA.

• Experience administering SIEM, EDR, and XDR platforms.

• Experience configuring…