Job Title: Cyber Security EngineerLocation: Ft Meade, MD/HybridClearance: Active Public Trust
Job Category: IT
Position Overview:The Cybersecurity Engineer provides hands-on cybersecurity engineering and operational security support for enterprise applications and cloud environments. The position works with system owners, security personnel, application teams, DevSecOps engineers, and operations teams to maintain security compliance, identify and remediate vulnerabilities, support continuous monitoring, and protect sensitive information.
Job Responsibilities
- Provide cybersecurity engineering support across development, testing, staging, and production environments.
- Support security of applications and infrastructure hosted within Google Cloud Platform (GCP).
- Implement and maintain technical security controls consistent with applicable organizational and federal security requirements.
- Support security authorization, assessment, and continuous monitoring activities.
- Identify, analyze, track, prioritize, and support remediation of application, infrastructure, cloud, and configuration vulnerabilities.
- Review security scan results, assess findings, coordinate remediation with engineering and development teams, and validate corrective actions.
- Develop and maintain security artifacts and supporting documentation for identified vulnerabilities and remediation activities.
- Integrate automated security testing and security controls into DevSecOps and CI/CD processes.
- Support incident response, investigation, containment, remediation, and root cause analysis.
- Support security logging, monitoring, alerting, and audit capabilities.
- Develop and maintain security documentation and evidence supporting security assessments, audits, releases, and change-control activities.
- Protect PII, sensitive information, and system data from unauthorized access, disclosure, modification, or loss.
- Participate in Agile/SAFe planning, sprint activities, technical working sessions, and security reviews.
Qualifications
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field, or equivalent relevant experience.
- 5+ years of cybersecurity engineering, security operations, or information systems security experience.
- Experience securing cloud-hosted applications and infrastructure, preferably within Google Cloud Platform (GCP).
- Experience with NIST SP 800-53, FISMA, RMF, vulnerability management, continuous monitoring, and security control implementation.
- Experience with vulnerability scanning, security monitoring/logging, incident response, and DevSecOps security practices.
- Experience supporting security assessments and remediation of identified vulnerabilities.
- Security+, CISSP, CCSP, Google Cloud security certification, or equivalent certification preferred.
Certifications:
- CompTIA Security+ or equivalent industry-recognized security certification (Required)
- CISSP; CCSP; Google Cloud Professional Cloud Security Engineer; CompTIA CySA+; GIAC certifications (Preferred)
