Cybersecurity Engineer - Washington DC

Military Spouse Corporate Career Network•Washington, DC

2d•Hybrid

About The Position

All Native Group, a division of Ho Chunk, Incorporated, is seeking an exceptional Cybersecurity Engineer to design, implement, and maintain enterprise security controls that enforce Zero Trust principles across the Congressional Budget Office's (CBO) cloud, network, and endpoint environments. The engineer strengthens CBO's security posture and detection and response capabilities, supporting Incident Response remediation and alignment with NIST SP 800-53 and NIST SP 800-207.

Requirements

Minimum of 5 years of professional cybersecurity engineering experience in enterprise environments.
Demonstrated experience with SIEM and EDR/XDR platforms and incident response.
Experience implementing NIST SP 800-53 and NIST SP 800-207 controls.
Cloud security experience with AWS and/or Azure.
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent professional experience.
CompTIA Security+ required.
Must be a U.S. citizen or permanent resident.
Position requires a Public Trust Tier 2 clearance.
Selected candidate must obtain favorable FBI criminal history and fingerprint checks conducted through the U.S. Capitol Police prior to starting work, and pass a background check to access the CBO network.

Nice To Haves

One of CISSP, GIAC (e.g., GCIH/GCIA), or Certified Ethical Hacker (CEH) strongly preferred.
Certifications (or their equivalent prior certifications) should have been maintained for a minimum of 5 years.

Responsibilities

Support the implementation, operation, and optimization of enterprise security platforms across cloud, on-premises, and hybrid environments.
Implement and maintain security controls aligned with NIST SP 800-53 (AC, CM, SC, AU, IR, and SI families) and NIST SP 800-207 Zero Trust Architecture.
Design and maintain least-privilege access controls including RBAC, PAM, and MFA across enterprise systems and applications.
Configure and manage IAM solutions with secure authentication, authorization, and enterprise identity provider integration.
Configure and maintain centralized logging, monitoring, and audit capabilities integrated with enterprise SIEM tools.
Monitor, analyze, and respond to security events using SIEM and EDR/XDR; support triage, containment, investigation, and remediation.
Conduct continuous monitoring, vulnerability assessments, and risk analysis; coordinate remediation aligned with the NIST RMF.
Harden systems, applications, and cloud environments (AWS, Azure) using secure configuration baselines.
Ensure security changes follow formal change management with documentation and security impact analysis.
Develop and maintain cybersecurity SOPs, configuration records, and asset inventories; perform root cause analysis for security incidents.
Support continuous, real-time (24/7) security monitoring and collaborate across network, cloud, and application teams.