The Cybersecurity Engineer provides engineering, operational, and advisory support to enhance, secure, and sustain the Congressional Budget Office’s (CBO) enterprise cybersecurity environment. This position is responsible for implementing and maintaining security controls across cloud, network, endpoint, and identity environments, with a focus on Zero Trust Architecture, continuous monitoring, threat detection, vulnerability management, and incident response. The Cybersecurity Engineer supports compliance with federal cybersecurity standards while strengthening the organization’s overall security posture and resilience.

Security Engineering & Operations

• Implement and maintain enterprise security controls aligned with NIST SP 800-53 and NIST SP 800-207 (Zero Trust Architecture).
• Support enterprise security platforms and services across cloud, on-premises, and hybrid environments.
• Configure and maintain identity and access management (IAM) solutions, including RBAC, PAM, MFA, and least-privilege access controls.
• Secure cloud and application environments through configuration management, hardening, and implementation of security best practices.
• Develop and maintain cybersecurity documentation, security baselines, and standard operating procedures (SOPs).

Threat Detection, Monitoring & Incident Response

• Configure and maintain centralized logging, monitoring, and audit capabilities integrated with SIEM, EDR/XDR, and cloud security platforms.
• Monitor and analyze security events, perform incident triage, support investigations, and assist with containment and remediation activities.
• Conduct root cause analysis (RCA) for security incidents and implement corrective actions.
• Support continuous security monitoring and threat detection efforts across enterprise environments.
• Collaborate with network, cloud, and application teams to resolve security issues and improve overall security operations.

Vulnerability Management & Compliance

• Conduct vulnerability assessments, risk analysis, and security reviews across systems, applications, and infrastructure.
• Coordinate remediation, patch management, and mitigation activities to reduce risk and maintain compliance.
• Support audits, assessments, and security authorization activities.
• Ensure all security changes follow approved change management processes and include appropriate security impact analysis.
• Maintain documentation and evidence required to support compliance, audit readiness, and operational continuity.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field (or equivalent combination of education and experience).
• Minimum five (5) years of experience in cybersecurity engineering, security operations, or information assurance.
• Experience implementing security controls aligned with NIST SP 800-53, NIST RMF, and Zero Trust principles.
• Experience with IAM technologies, SIEM platforms, EDR/XDR tools, vulnerability management, and incident response.
• Experience securing cloud environments (AWS, Azure, or hybrid cloud).
• Strong analytical, troubleshooting, documentation, and communication skills.

Preferred Qualifications

• Experience supporting federal agencies or highly regulated environments.
• Experience with Zero Trust Architecture implementations.
• Knowledge of cloud security, threat detection, and security automation technologies.
• Familiarity with NIST SP 800-53, NIST SP 800-207, FISMA, and federal compliance requirements.

Preferred Certifications

• CISSP
• Security+
• GIAC Security Certifications (GSEC, GCIA, GCIH)
• Certified Cloud Security Professional (CCSP)
• Microsoft, AWS, or Azure Security Certifications

Security Requirements

• Ability to obtain and maintain all required government security clearances and access authorizations.