Cyber Security Engineer

Bowman Consulting Group, Ltd.•Reston, VA

29d•Onsite

About The Position

Bowman has an opportunity for a Cyber Security Engineer to join our team in Virginia. At Bowman, we believe in creating opportunities for aspiring people to thrive and achieve ambitious goals. That’s why a career at Bowman is more than a job. It is an opportunity to be part of a diverse and engaged community of professionals, to be treated as a respected and valued member of a motivated team and to be empowered to do exceptional work that advances the best interest of everyone involved. We recognize the importance of creating a work environment that is both rewarding to our employees and supportive of our unwavering commitment to provide unparalleled service to our clients. Responsible for protecting and strengthening Bowman’s information systems, cloud environments, networks, and digital assets. This role designs, implements, and supports security solutions that reduce risk, enhance resilience, and enable secure business operations while continuously improving the organization’s overall security posture.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field (or equivalent experience).
Five or more (5+) years of experience in cybersecurity, information security, security operations, or security engineering.
Experience implementing and supporting enterprise security technologies and controls.
Working knowledge of SOC operations, incident response, vulnerability management, endpoint and network security, identity and access management, SIEM platforms, Microsoft 365, and cloud security.
Experience with scripting languages such as PowerShell or Python.
Familiarity with security frameworks such as NIST, CIS Controls, or ISO 27001.
Experience with tools such as Microsoft Defender, Microsoft Sentinel, CrowdStrike, Splunk, or similar platforms.
Experience supporting cloud environments, particularly Microsoft Azure.

Nice To Haves

Preferred certifications: CISSP, Security+, CySA+, GSEC, GIAC, Microsoft Security certifications, or equivalent.
Experience with security automation and orchestration tools is a plus.

Responsibilities

Provide cybersecurity guidance and technical expertise to project teams and stakeholders.
Promote security awareness and best practices across the organization.
Mentor junior IT and security team members as needed.
Stay current on cybersecurity threats, vulnerabilities, and industry trends.
Partner with infrastructure, application, and business teams to identify, prioritize, and remediate security risks.
Support compliance initiatives, audits, and regulatory requirements.
Assist in developing and maintaining cybersecurity policies, standards, and procedures.
Evaluate emerging technologies and recommend security enhancements aligned with business objectives.
Design, implement, and maintain enterprise security controls and technologies.
Monitor security events and respond to potential threats through investigation, containment, remediation, and recovery.
Configure and manage security tools (e.g., endpoint protection, SIEM, IAM, email security, vulnerability management platforms).
Conduct vulnerability assessments and security reviews.
Develop and maintain system hardening standards and security baselines.
Support cloud security initiatives, including Microsoft Azure and Microsoft 365.
Automate security processes using scripting and orchestration tools.
Maintain documentation of security configurations, controls, and procedures.
Assist in securing SaaS platforms, AI-enabled solutions, and modern enterprise technologies.