Cybersecurity Engineer

Ardent•Washington, DC

33d•Hybrid

About The Position

Ardent is seeking a Cybersecurity Engineer to support the design, implementation, maintenance, and continuous improvement of enterprise cybersecurity controls across cloud, network, endpoint, and identity environments. This role will support Zero Trust initiatives, continuous monitoring, threat detection, incident response, vulnerability management, and security operations activities while helping strengthen the overall security posture of the organization. The Cybersecurity Engineer will collaborate with cloud, network, application, and infrastructure teams to ensure security technologies, systems, and services are properly configured, hardened, monitored, and maintained in accordance with federal cybersecurity standards and industry best practices.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field.
Minimum of 5 years of experience supporting cybersecurity engineering, security operations, incident response, vulnerability management, or related disciplines.
Experience implementing and supporting enterprise security controls aligned with NIST cybersecurity frameworks.
Experience supporting Identity and Access Management (IAM), role-based access control, privileged access management, and multi-factor authentication.
Experience working with SIEM, EDR/XDR, vulnerability management, and security monitoring technologies.
Experience supporting security incident response, threat detection, and remediation activities.
Experience securing cloud, hybrid, and enterprise environments.
Experience with centralized logging, monitoring, and audit solutions.
Strong understanding of Zero Trust Architecture principles and least-privilege access models.
Strong written and verbal communication skills.
Ability to work independently and collaboratively in a team environment.
Ability to successfully complete and maintain a government background investigation.

Nice To Haves

Experience supporting federal government environments.
Familiarity with NIST SP 800-53, NIST SP 800-207, FISMA, and Risk Management Framework (RMF) requirements.
Experience supporting AWS and Azure cloud security initiatives.
Experience with privileged access management, segmentation strategies, and enterprise security architecture.
Experience supporting automated patch management and vulnerability remediation programs.
Experience performing forensic analysis, root cause analysis, and security investigations.
Industry certifications such as Security+, CySA+, CISSP, GSEC, GCIA, GCIH, or equivalent.

Responsibilities

Support the implementation, operation, and optimization of enterprise security platforms and services across cloud, on-premises, and hybrid environments.
Implement and maintain enterprise security controls aligned with NIST SP 800-53 and Zero Trust Architecture principles.
Support identity and access management initiatives, including authentication, authorization, role-based access controls, privileged access management, and multi-factor authentication.
Configure and manage identity services and enterprise access control solutions.
Monitor, analyze, and respond to security events and alerts using SIEM, EDR/XDR, and related security technologies.
Support incident triage, containment, investigation, remediation, and forensic data collection activities.
Maintain continuous security monitoring capabilities, including log collection, correlation, and analysis.
Conduct vulnerability assessments, risk analysis, and remediation activities across systems, applications, and infrastructure.
Support patch management, mitigation efforts, and security hardening initiatives.
Assist with securing cloud and hybrid environments, including AWS, Azure, and related cloud security services.
Configure and maintain centralized logging, monitoring, and audit capabilities.
Support change management processes, security documentation, and operational procedures.
Develop and maintain cybersecurity standard operating procedures, security baselines, and asset inventories.
Perform root cause analysis for security incidents and control failures and assist with corrective action implementation.
Collaborate with network, cloud, application, and engineering teams to resolve security issues and improve overall security operations.
Support 24/7 monitoring and operational security activities as required.