Senior Cybersecurity Engineer

The Senior Cyber Security Engineer will design, develop, and maintain reusable frameworks, libraries, APIs, and reference implementations for zero trust authentication and authorization.

Responsibilities:

• Create developer guides, documentation, and best practices to enable smooth integration with security services. Implement and support fine-grained authorization patterns (entitlements, row-level security, ABAC).
• Collaborate with architects and engineers to ensure security services meet performance, usability, and compliance requirements.
• Conduct code reviews and provide guidance to development teams on secure coding and integration practices.
• Research emerging zero trust and identity/access management technologies to recommend improvements.

Here’s what you need:

• 7 years of experience as a cybersecurity engineer with a specialization in designing and building implementations of required security controls; and implementing continuous monitoring and auditing of solutions for compliance with security controls.
• Strong skills in specifying and implementing log collection into tools such as Splunk, and performing querying and analysis of aggregated logs to identify security-relevant anomalies or risks
• Strong experience in implementing security controls from government regulatory frameworks and security standards (e.g., NIST SP 800-53, RMF, ICD 503, FISMA, FedRAMP).
• Experience with implementing controls for cloud, container, and DevSecOps services and solutions within IL5 to IL6+ environments.
• Strong understanding of network protocols, operating systems, and infrastructure components.
• Proficiency in incident response, security incident handling, and forensic analysis techniques.
• CISSP or equivalent certification to support DoD 8140 requirements

Bonus points if you have:

• Expert proficiency in incident response, security incident handling, and forensic analysis techniques.
• Expertise with security tools such as Fortify, Acunetix, and Prisma Cloud
• Experience performing periodic (Daily, Weekly, Monthly) security check to support continuous monitoring aligned with the NIST Risk Management Framework
• Experience applying Security Technical Implementation Guide (STIG) requirements to harden information systems (Linux Preferred)
• Effective communication skills, with the ability to convey complex technical concepts to both technical and non-technical stakeholders.
• CISSP or equivalent certification to support DoD 8140 requirements

Eligibility Requirements:

• Requires an active TS/SCI and polygraph