Cybersecurity/Technical Engineer
The Cybersecurity/Technical Engineer designs and maintains secure enterprise systems, focusing on IAM, vulnerability management, and continuous security monitoring. The role involves collaborating with technical teams to implement security controls and ensure compliance within federal government environments.
- Compensation
- $85K–$170K / yr
- Location
- McLean, VA, US
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- Ability to obtain and maintain a government security clearance
- Bachelor’s degree in Cybersecurity, Computer Science, IT, Engineering, or equivalent experience
- 5+ years of experience in cybersecurity engineering, security architecture, or systems security
- Hands-on experience designing, implementing, or securing enterprise systems
- Experience with IAM, authentication, authorization, and least-privilege principles
- Experience identifying, assessing, tracking, and supporting vulnerability remediation
- Experience with continuous security monitoring and vulnerability management
- Knowledge of security architecture, system hardening, and security control implementation
- Experience with security monitoring, endpoint security, or cloud security technologies
Nice to have
- Experience with tools such as CrowdStrike, Tanium, Wiz, or Splunk
- Experience with GRC platforms or security compliance management tools
- Experience securing cloud environments
- Knowledge of federal cybersecurity requirements and continuous monitoring
- Experience in federal government or highly regulated environments
- Relevant certification such as CISSP, Security+, or GIAC
Full description
Overview
We are seeking a Cybersecurity/Technical Engineer responsible for designing, implementing, and maintaining secure systems across complex enterprise environments. This role will support security architecture, identity and access management (IAM), authentication and authorization hardening, vulnerability management, and continuous security monitoring throughout the system lifecycle.
The Cybersecurity/Technical Engineer will work across technical teams to ensure security requirements are incorporated into system design and implementation, identify and track vulnerabilities, evaluate security controls, and monitor environments for emerging risks. This role requires broad hands-on cybersecurity experience and the ability to apply security principles across systems, infrastructure, applications, and cloud environments.
Contributions
- Design and implement systems and technical solutions with security requirements incorporated throughout the system lifecycle
- Support security architecture and engineering activities to ensure systems align with established security requirements and best practices
- Implement and maintain identity and access management (IAM) controls, including authentication and authorization mechanisms
- Apply least-privilege principles and access controls to reduce unauthorized access and security risk
- Assess and harden systems, configurations, authentication mechanisms, and authorization controls
- Identify, assess, document, and track vulnerabilities across systems and environments
- Partner with technical teams to prioritize and remediate identified vulnerabilities and security weaknesses
- Conduct follow-up assessments and continuous monitoring to identify newly introduced or recurring vulnerabilities
- Implement and support tools and processes used for vulnerability identification, security monitoring, and control validation
- Monitor systems and security data to identify potential vulnerabilities, configuration weaknesses, threats, and anomalous activity
- Support security activities throughout the system lifecycle, including design, implementation, operation, maintenance, and system changes
- Evaluate technical changes and system configurations for potential security impacts
- Collaborate with system administrators, cloud engineers, software engineers, cybersecurity teams, and other technical stakeholders to implement and maintain security controls
- Support security documentation, technical findings, remediation tracking, and reporting aligned with established security requirements