Cybersecurity Engineer

Full-time

Salary: $115,000 – $121,000/year

Work location: Hybrid with as-needed on site work, Washington, DC

Conducting Security Assessments & Penetration Testing:

• Perform vulnerability assessments using various tools and techniques (e.g., network scanning, code reviews, penetration testing) to identify and document security weaknesses.
• Analyze security logs and identify suspicious activity.
• Generate comprehensive reports detailing findings, risks, and remediation recommendations.

Implementing & Managing Security Controls:

• Design, deploy, and configure security controls such as firewalls, Intrusion Detection System (IDS), Intrusion Prevention System (IPS), Endpoint Detection & Response (EDR), Zero Trust Security (ZTS), Security Information & Event Management (SIEM) solutions.
• Monitor security systems for alerts and anomalies, investigate security incidents, and respond to security breaches effectively.
• Manage security access controls, including user authentication, authorization, and access rights.
• Implement and maintain security policies, procedures, and standards.

Incident Response & Forensics:

• Develop and maintain incident response plans.
• Investigate security incidents, collect and analyze evidence, and assist in the remediation process.
• Conduct forensic analysis of systems and data to identify the root cause of security breaches.

Staying Current on Threats & Technologies:

• Research and stay updated on emerging cyber threats, vulnerabilities, and attack vectors.
• Attend industry conferences, training sessions, and read security publications to enhance knowledge and skills.
• Evaluate and recommend new security technologies and solutions to improve the Court’s security posture.

• Minimum of 7 years of professional experience in cybersecurity or a related field (e.g., systems administration, network engineering).
• Hands-on experience with security tools and technologies such as firewalls, Intrusion Detection System (IDS), Intrusion Prevention System (IPS), Endpoint Detection & Response (EDR), Zero Trust Security (ZTS), Data Loss Prevention (DLP), Security Information & Event Management (SIEM), vulnerability assessment solutions.
• Strong understanding of cybersecurity principles and best practices:
  Familiarity with common attack vectors (e.g., malware, phishing, social engineering), security frameworks (e.g., NIST Cybersecurity Framework, ISO 27001), and regulatory compliance requirements (e.g., GDPR, HIPAA).
• Proficiency in network security concepts:
  Deep understanding of network protocols (TCP/IP, UDP, DNS), network topologies, and network devices (routers, switches, firewalls).
• Technical expertise:
  Proficiency in scripting languages (e.g., Python, Power Shell), command-line interfaces (CLI), and various operating systems (Windows, Linux, macOS).
• Analytical and problem‑solving skills:
  Ability to analyze complex security issues, identify root causes, and develop effective solutions.
• Excellent communication and interpersonal skills:
  Ability to communicate technical information clearly and concisely to both technical and non‑technical audiences.
• Strong attention to detail and organizational skills:
  Ability to manage multiple tasks, prioritize effectively, and work independently.

• CompTIA Security+: A foundational certification demonstrating a broad understanding of cybersecurity concepts and principles.
• Microsoft Azure Security Technologies Certified
• Certified from Zscaler, Crowd Strike, or/and Splunk vendor programs….
• Certified Ethical Hacker (CEH): A certification focusing on the technical skills required to perform ethical hacking and penetration testing.
• Certified Information Systems Security Professional…