Cybersecurity Engineer

Cybersecurity Engineer

Reston, VA/ College Park, MD/ Anacostia
- Bolling Base, DC
TS/SCI with CI Polygraph
Salary Range: $160,000-$190,000

As Sr. Cybersecurity Engineer, you’ll play a critical role in safeguarding digital assets by designing, implementing, and maintaining robust cybersecurity infrastructure. You will work collaboratively with cross-functional teams to identify vulnerabilities, develop solutions, and ensure compliance with security protocols and industry standards. Staying informed about emerging trends and threats in the cybersecurity landscape, you will proactively enhance defenses through innovative tools and methodologies.

Additionally, you will conduct risk assessments, implement security controls, and support incident response efforts to minimize risks and maintain the integrity of our systems and data.

Cornerstone Defense offers a comprehensive list of benefits, designed to give employees and their families several options to choose from when selecting benefits that best fit their needs. These offerings include not only a full suite of the traditional Medical/Dental/Vision insurances, but also a number of other benefits and perks to include, but not limited to: A 401(K) plan with a company match, tuition and training assistances, paid vacation/leave, a fitness reimbursement program, college savings plan, commuter benefits, financial advisory services, flex spending accounts, health savings accounts, STD/LTD coverage, life and AD&D insurance, employee assistance programs, life financial planning assistance, and legal resources.

• Design, implement, and manage security solutions, including firewalls, intrusion detection/prevention systems, endpoint protection, and encryption mechanisms to ensure the organization's networks and systems remain secure.
• Conduct regular security assessments to identify vulnerabilities and weaknesses in systems, networks, and applications.
• Develop and implement incident response plans to effectively address security breaches, incidents, and breaches.
• Collaborate with cross-functional teams to establish and enforce security policies, standards, and procedures.
• Monitor network traffic, system logs, and security alerts to detect and respond to potential security incidents.
• Analyze and investigate anomalies and security breaches, taking appropriate actions to mitigate risks.
• Work closely with cross-functional teams, including IT, software development, and compliance, to integrate security into all phases of the development lifecycle and ensure a comprehensive approach to cybersecurity.
• Maintain thorough and accurate documentation of security processes, procedures, and configurations. Prepare detailed reports on security findings, incidents, and actions taken.

• A minimum of 4-7 years of experience as a Cyber Security Engineer with an emphasis on automation and platform engineering providing subject matter expertise to the team and the customer
• 3 years of experience with designing and building implementations of required security controls; and implementing continuous monitoring and auditing of solutions for compliance with security controls.
• Strong experience in implementing security controls from government regulatory frameworks and security standards (e.g., NIST SP 800-53, RMF, ICD 503, FISMA, FedRAMP).
• Experience with researching, designing, testing, evaluating and implementing technologies such as Infrastructure as Code (IaC), containerization, K8, and CI/CD Automation
• Experience with Source Code repositories and CI/CD pipeline solutions such as Bitbucket, and Git Hub
• Experience with container orchestration tools (Open Shift preferred)
• Demonstrated and repeat experience implementing controls for cloud, container, and/or Dev Sec Ops  services and solutions from IL5 to IL6+ on NIPR, SIPR, and JWICS.
• Expert-level skills in specifying and implementing log collection into tools such as Splunk, and performing querying and analysis of aggregated logs to identify security-relevant anomalies or risks
• Expert proficiency in incident response, security incident handling, and forensic analysis techniques.
• Expertise with…