Cyber Security Project Engineer

Ardent Principles, Inc. • Chantilly, VA

2d • $130,000 - $260,000 • Onsite

About The Position

Ardent Principles is seeking a Cyber Security Project Engineer to lead the design, implementation, and continuous improvement of secure enterprise and cloud-based environments. The position combines hands-on cybersecurity engineering with security compliance and risk management, with a focus on cyber defense operations, AWS security, vulnerability management, automation, and Assessment & Authorization (A&A) activities.

The role is full-time and onsite in Chantilly, Virginia. Applicants must hold an active TS/SCI clearance with a Full Scope Polygraph. Consultants are expected to be available and working onsite during core hours.

Requirements

• Active TS/SCI clearance with Full Scope Polygraph.
• Significant and current experience in real-time prevention, detection, and remediation of cyberattacks on internet-facing systems.
• Experience in either offensive cyber operations, such as penetration testing, red teaming, or ethical hacking, or defensive cyber operations, such as security operations, incident response, or threat hunting.
• Proficiency in scripting languages such as Python, PowerShell, or Bash for automation and analysis.
• Experience with SIEM systems such as Splunk, QRadar, or Elastic Stack.
• Experience with AWS cloud logging, including CloudTrail and CloudWatch.
• Knowledge of network protocols, packet capture analysis, and NetFlow analysis.
• Experience analyzing security event logs, including Windows event logging and Syslog.
• Understanding of network protocols, Windows and Linux operating systems, and cloud environments such as AWS, Azure, and GCP.
• Knowledge of attack vectors, exploitation techniques, and defensive countermeasures.
• Experience preparing A&A packages needed to obtain security approvals for production system deployments.
• Ability to review assessment reports, identify security risks, and develop mitigation strategies, including POA&Ms.
• Experience ensuring system components and software applications meet continuous monitoring and security access and control requirements.
• Experience reviewing and authoring SSPs, security requirements, and other documentation supporting the A&A process.
• Experience writing and reviewing NIST 800-53 controls.
• Experience running and interpreting Rapid7 scans.
• Experience working with Amazon Cloud security.
• Experience with data visualization tools such as Tableau to support development of stakeholder monitoring dashboards.
• Ability to work independently and as part of a team in a fast-paced environment.

Nice To Haves

• Knowledge of information security standards such as ISO 27001 and NIST.
• Ability to design, implement, and maintain intrusion detection and prevention (IDS/IPS) technologies.
• Experience using common offensive security tools and methodologies such as Metasploit, Nmap, Burp Suite, or Cobalt Strike.
• Experience processing software applications through the Sponsor's approval channels for operation within the Sponsor's cloud offerings.
• Experience working in a customer-facing environment.
• Exceptional analytical and problem-solving skills, including the ability to dissect complex technical issues and propose effective solutions.

Responsibilities

• Prevent, detect, and remediate cyberattacks on internet-facing systems in real time.
• Conduct offensive or defensive cyber operations, including activities such as penetration testing, red teaming, ethical hacking, security operations, incident response, or threat hunting.
• Use scripting languages such as Python, PowerShell, or Bash for automation and analysis.
• Work with SIEM systems such as Splunk, QRadar, or Elastic Stack.
• Use AWS cloud logging services, including CloudTrail and CloudWatch.
• Analyze network protocols, packet captures, and NetFlow data.
• Analyze security event logs, including Windows event logs and Syslog.
• Apply knowledge of network protocols, Windows and Linux operating systems, and cloud environments.
• Assess attack vectors and exploitation techniques and apply defensive countermeasures.
• Prepare Authority and Accreditation (A&A) packages to obtain security approvals for system deployments into production.
• Review assessment reports, identify technical and non-technical security risks, and develop mitigation strategies, including Plans of Action and Milestones (POA&Ms).
• Ensure system components and software applications adhere to continuous monitoring and security access and control requirements.
• Review and author System Security Plans (SSPs), security requirements, and other A&A supporting documentation.
• Write and review NIST 800-53 controls.
• Run and interpret Rapid7 scans.
• Work with Amazon Cloud security.
• Use data visualization tools such as Tableau to support dashboards for stakeholder system monitoring and oversight.
• Work effectively independently and as part of a team in a fast-paced environment.

Benefits

• Competitive salary.
• Generous paid time off.
• Dedicated training budget supporting continuous learning and professional development.
• 100% employer-covered family vision, dental, and health insurance.
• 100% employer-covered life and disability insurance.
• 401(k) plan with a 6% employer match and 100% vesting from day one.
• 11 paid government holidays.
• Spot bonuses for exceptional performance.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed