Associate Cybersecurity Engineer

Steampunk•McLean, VA

2d•$60,000 - $70,000•Hybrid

About The Position

Steampunk is seeking an Associate Cybersecurity Engineer to support a federal customer in Washington, DC on a large, enterprise cybersecurity program within the CIO organization. This role is ideal for an early-career cybersecurity professional interested in security operations, compliance, risk management, and project coordination. You will support cybersecurity initiatives across the enterprise by assisting with system security activities, vulnerability management, reporting, onboarding, and Agile team execution while helping ensure compliance with federal security requirements.

Requirements

1 year of relevant cybersecurity, information technology, system administration, information assurance, or related experience.
Experience with Design Intelligence.
Basic understanding of cybersecurity principles, security tools, and security operations processes.
Familiarity with federal cybersecurity frameworks, compliance requirements, or security best practices, including NIST, FISMA, or RMF.
Basic experience with scripting, automation, or cybersecurity tools through coursework, internships, labs, or professional experience.
Experience supporting cybersecurity, Digital Intelligence, software development, or IT teams through Agile collaboration, reporting, project support, or technical initiatives.
Strong organizational, analytical, and problem-solving skills.
Ability to manage multiple priorities in a fast-paced environment.
Strong written and verbal communication skills.
Proficiency in Microsoft Office tools, including Word, Excel, PowerPoint, and Visio.

Nice To Haves

Experience supporting a Security Operations Center (SOC), cybersecurity program, or system administration team.
Familiarity with vulnerability management, security monitoring, or endpoint management tools.
Knowledge of scripting or programming languages such as Python, PowerShell, Java, or JavaScript.
Security certification such as Security+, C|ND, C|ASE, or CEH.

Responsibilities

Support ISSO activities by maintaining SSPs, POA&Ms, contingency plans, and system inventories while assisting with security assessments aligned to NIST, FISMA, and RMF
Perform vulnerability scanning support, remediation tracking, and engineering activities, including analysis and root cause identification to improve system security posture
Assist with SecDevOps and CI/CD pipeline security by integrating automated scans, supporting secure configurations, and enabling early detection of vulnerabilities in the SDLC
Contribute to security reporting, incident documentation, and development of dashboards/automation to enhance visibility, compliance tracking, and operational efficiency
Manage JIRA boards, tasks, workflows, and reporting outputs.
Develop and maintain Kanban and Scrum boards to support Agile team execution.
Coordinate onboarding and offboarding activities, including equipment provisioning and access management.
Produce weekly, monthly, and ad hoc reports to provide program visibility and performance tracking.
Support data calls by coordinating communication, tracking tasks, and compiling responses.
Collaborate with cybersecurity engineers, Digital Intelligence teams, IT staff, and federal stakeholders to gather timely and accurate inputs.
Collect and analyze data to identify trends and recommend process improvements.
Support project schedules, action item tracking, stakeholder communications, and additional cybersecurity or administrative activities as needed.