Cyber Engineer

Avyanna Technologies • Bethesda, MD

1d

About The Position

We are seeking a Cyber Engineer to support the implementation, operation, and continuous improvement of cybersecurity capabilities for a federal IT program. This role performs vulnerability management, security monitoring, incident response support, and compliance activities within a FISMA-regulated environment following NIST frameworks.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, or related field
• 4+ years of cybersecurity engineering experience in a federal or regulated IT environment
• Hands-on experience with vulnerability scanning tools (Tenable.sc or Qualys) and SIEM platforms (Splunk preferred)
• Working knowledge of NIST SP 800-53, NIST SP 800-37 (RMF), and FISMA compliance requirements
• Experience contributing to ATO packages and supporting security assessments
• CompTIA Security+ certification (DoD 8570.01-M compliant)
• Must be eligible to obtain and maintain a federal Public Trust background investigation (MBI or HBI). U.S. citizenship or permanent residency required.

Nice To Haves

• CEH, CASP+, or CISSP certification
• Experience with CDM tools: BigFix, Axonius, or Tenable.sc in a federal dashboard environment
• Familiarity with Zero Trust architecture principles and NIST SP 800-207
• Experience supporting security operations at NIH, HHS, or similar federal research agencies

Responsibilities

• Operate and manage vulnerability scanning tools (Tenable.sc / Nessus, Qualys) — conduct scans, analyze results, prioritize findings, and track remediation through closure
• Monitor security events and alerts using SIEM platforms (Splunk, Microsoft Sentinel); investigate anomalies and escalate confirmed incidents per the IR plan
• Support the ATO process: contribute to System Security Plans (SSPs), Security Assessment Reports (SARs), and POA&M management
• Assess and document compliance with NIST SP 800-53 security controls; assist with continuous monitoring activities and ConMon reporting
• Perform security configuration reviews against DISA STIGs and CIS Benchmarks; document findings and work with system owners on remediation
• Support implementation and tuning of security tools: IDS/IPS, DLP, endpoint detection and response (EDR), and multi-factor authentication solutions
• Contribute to threat intelligence analysis and security awareness activities; assist with tabletop exercises and incident response drills

Benefits

• health
• dental
• vision
• 401(k)
• paid time off
• professional development support

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level