Cybersecurity Engineer, Lead

Indigo IT • Ashburn, VA

6d • Hybrid

About The Position

Indigo IT is seeking a Cybersecurity Engineer Lead to support its OIT End-User Device IT Management Services team in Ashburn, Virginia, in a hybrid work arrangement. The role is responsible for vulnerability and configuration compliance across enterprise Windows and MacOS desktops, laptops, and tablets, including programs, applications, updates, and security patches. The engineer develops security measures to protect data, systems, and networks; investigates and responds to vulnerability and compliance issues; and creates standard operating procedures for sound IT practices during software package building, testing, deployment, and analysis.

The position supports Risk Management Framework activities, especially continuous monitoring, and participates in or leads Security Assessment and Authorization activities. It conducts conformance and operational testing, creates auditable evidence of security measures, supports Independent Validation and Verification, and helps maintain information assurance reporting and inspection coordination. The engineer also performs assigned operational security work, including incident handling and analysis, and advises senior leadership or authorizing officials about changes affecting the organization’s information assurance posture.

Additional duties include analyzing port, protocol, and network traffic information; supporting continuity-planning information assurance requirements; and providing cybersecurity subject matter expertise for business development materials. The role works with the ISSO and ISSM on field support and POA&M closure, offers guidance on Vulnerability Assessment Team findings, and assists junior staff with accurate FISMA system inventories and asset management. The engineer is expected to lead teams and support junior staff.

Requirements

• At least 5 years of hands-on experience detecting, monitoring, and remediating security issues involving network, hardware, software, and platform security.
• Demonstrable experience performing compliance control testing, identifying and resolving cybersecurity issues, and developing remediation or mitigation strategies.
• A bachelor’s or master’s degree in Cybersecurity, Computer Science, Computer Information Systems, or Information Technology; a master’s degree is preferred. In lieu of a college degree, 10 years of demonstrated hands-on experience in control testing, vulnerability identification and resolution, and cybersecurity risk recommendations will be considered.
• Possess one or more of the following certifications: ISC2 Certified Information Systems Security Professional (CISSP), EC-Council Certified Ethical Hacker, or CompTIA Security Analytics Expert. Equivalent certifications may be considered.
• Advanced or expert knowledge and/or work experience with information certification and accreditation regulations, FISMA, and NIST guidance.
• Ability to identify, collect, process, document, and report cybersecurity and incident-response events.
• Experience with Zero Trust implementation and environments.
• Experience with Tenable Nessus, Security Center, Tanium, or similar tools.
• Experience with Splunk or another SIEM.
• Experience with ISVM, security patches, vulnerabilities, STIG configuration, and GPO/Group Policy.
• Experience with the CISA KEV list and implementation deadlines.
• Experience with operations-based testing scenarios.
• Ability to analyze data sets, determine trends, establish strategies, make decisions about real-time threats, and identify and eliminate false positives from operational reports.
• Strong time-management skills and ability to handle multiple priorities and complete tasks on time.
• Strong analytical skills.
• Excellent interpersonal and communication skills, including the ability to communicate effectively with diverse audiences.
• Self-starter able to work independently and as part of a team, with the ability and desire to own tasks from start to finish.
• Experience leading teams and providing feedback to junior members.
• Familiarity with FISMA law and working with FISMA systems.
• Ability to work with technology evaluation boards and support Authority to Operate, Authority to Test, Risk Acceptance proposals, and POA&M tracking and closure.

Nice To Haves

• Current CBP Background Investigation or a Top Secret clearance adjudicated within the last 5 years.
• A master’s degree in Cybersecurity, Computer Science, Computer Information Systems, or Information Technology.

Responsibilities

• Support execution of the Risk Management Framework, particularly Continuous Monitoring.
• Participate in and lead Security Assessment and Authorization activities as required.
• Perform conformance testing to assess compliance with system and application baselines and other defined specifications or standards.
• Assist with test-bed hardware and peripheral testing, including recording and analyzing test data.
• Create auditable evidence of security measures.
• Assist with conducting and monitoring Independent Validation and Verification testing for software applications and systems.
• Advise senior leadership or the authorizing official of changes affecting the organization’s information assurance posture.
• Collect and maintain data needed for system information assurance reporting.
• Coordinate information assurance inspections, tests, and reviews with team members.
• Perform assigned operational security tasks, including incident handling and analysis, and prepare reports for senior leadership.
• Use existing security tools to perform RMF continuous monitoring activities.
• Analyze port, protocol, and network traffic information to assess the organization’s real-time information security posture.
• Adhere to information assurance requirements integrated into system and organizational continuity planning.
• Provide cybersecurity subject matter expertise for proposals, white papers, and requests for information as needed.
• Develop security measures and investigate and respond to vulnerability and compliance issues across enterprise Windows and MacOS devices.
• Develop SOPs for sound IT practices during software package building, testing, deployment, and analysis.
• Develop and implement cybersecurity and incident-response policies and procedures; engineer, test, install, patch, and upgrade information-security hardware and software applications.
• Create, modify, and test contingency plans.
• Recommend internal process improvements to maximize customer service and improve organizational security posture.
• Lead teams and provide feedback to junior members.
• Maintain and acquire Authority to Operate and assist with all phases of Authority to Test, including testing.
• Write Risk Acceptance proposals.
• Work with technology evaluation boards to have products and services evaluated for enterprise use.
• Work with the ISSO and ISSM to provide field support and assist with tracking and closing Plans of Actions and Milestones.
• Provide expert guidance to management on Vulnerability Assessment Team findings in coordination with the ISSO.
• Help junior staff provide accurate FISMA system inventories for asset management and Vulnerability Assessment Team scanning.

Benefits

• Medical, dental, and vision coverage options.
• 401(k) with company match.
• Group life and disability coverage.
• Flexible Spending Accounts (FSA).
• Paid Time Off (PTO).
• Paid holidays.
• Education assistance.
• In-house employee training programs.
• Bonuses and recognition for publishing, speaking, and innovative thought leadership.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior