Lead Cybersecurity Engineer

Gunnison Consulting Group • Bethesda, MD

6d • Hybrid

About The Position

This position is contingent upon a future opening with Gunnison. Serve as the technical lead for cybersecurity engineering activities supporting NIH CIT enterprise services, including network, email, endpoint, server, cloud, and related infrastructure environments. Architect, deploy, configure, integrate, operate, and improve cybersecurity tools and technologies used to inspect and protect network traffic, email traffic, endpoints, workstations, and servers. Lead security engineering activities involving threat detection, event analysis, log management, vulnerability identification, remediation validation, compromise assessments, and continuous monitoring. Provide subject-matter expertise in security industry standards, leading practices, and control implementation, with particular emphasis on compromise assessment, threat detection, endpoint protection, and network security. Administer, configure, tune, and analyze outputs from security platforms such as Tenable, Splunk, BigFix, and comparable vulnerability-management, SIEM, endpoint-management, and security-monitoring tools. Conduct or support penetration testing, vulnerability assessments, security-control assessments, technical risk analyses, and validation of remediation activities. Analyze security events, vulnerabilities, system configurations, and threat indicators; identify risks; recommend mitigations; and track corrective actions through closure. Evaluate and help implement security controls across enterprise environments in alignment with RMF, continuous-monitoring requirements, and applicable HHS, NIH, DHS, and other federal cybersecurity policies and directives. Consult directly with Government stakeholders, system owners, technical teams, and program leadership on complex security-engineering issues, risk decisions, remediation strategies, and technical implementation approaches. Produce clear, accurate technical reports, dashboards, briefings, findings, risk assessments, remediation-status reports, and other artifacts that communicate progress and cybersecurity posture to both technical and executive audiences. Lead and mentor cybersecurity engineers and analysts; review technical work products; establish engineering priorities; and coordinate work across multiple concurrent cybersecurity initiatives. Participate in customer meetings, technical working groups, incident-related activities, and project reviews; communicate risks, dependencies, milestones, and recommended next steps. Develop and maintain standard operating procedures, engineering documentation, security architecture diagrams, implementation guides, and repeatable processes for cybersecurity operations.

Requirements

• Minimum of three (3) to five (5) years of progressively responsible cybersecurity engineering, network security, information-security operations, or related technical experience.
• Security engineering for enterprise network, email, endpoint, workstation, server, and/or cloud environments.
• Architecting, deploying, configuring, and operating cybersecurity tools used for network inspection, email security, endpoint security, vulnerability management, security monitoring, or log analysis.
• Vulnerability management, continuous monitoring, compromise assessments, security-control assessments, penetration testing, or remediation validation.
• Security platforms such as Tenable, Splunk, BigFix, or functionally comparable technologies.
• Network engineering and cybersecurity concepts, including traffic analysis, security logging, intrusion detection/prevention, endpoint protection, and system hardening.
• Preparing technical reports and customer-facing briefings that communicate security findings, risks, remediation progress, and recommended actions.
• Consulting with customers and technical stakeholders on security-engineering, compliance, risk-management, and remediation issues.
• Applying federal cybersecurity requirements, including familiarity with HHS, NIH, DHS, NIST, FISMA, RMF, and continuous-monitoring principles.
• GIAC certification, current/active Certified Information Systems Security Professional (CISSP), current/active Splunk certification, such as Splunk Core Certified Power User, Splunk Enterprise Certified Admin, Splunk Core Certified Advanced Power User, or comparable Splunk security/engineering credential.
• Bachelor’s degree from an accredited college or university in cybersecurity, information assurance, computer science, information systems, computer engineering, network engineering, electrical engineering, or a closely related technical discipline.
• Ability to obtain and maintain a Public Trust.

Nice To Haves

• Master’s degree in cybersecurity, information assurance, computer science, information systems, engineering, data analytics, or a related technical discipline.
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)
• Certified Authorization Professional (CAP)
• Certified Cloud Security Professional (CCSP)
• CompTIA Security+, CySA+, PenTest+, or CASP+
• EC-Council Certified Ethical Hacker (CEH) or equivalent penetration-testing certification
• Offensive Security Certified Professional (OSCP) or equivalent offensive-security credential
• Tenable/Nessus certification or advanced Tenable platform training
• BigFix administration, endpoint-management, or related platform certification
• AWS Certified Security – Specialty
• Microsoft Certified: Azure Security Engineer Associate
• Google Professional Cloud Security Engineer
• Cisco security certifications, including CCNA CyberOps, CCNP Security, or equivalent
• GIAC incident-response, intrusion-analysis, penetration-testing, or cloud-security certifications, such as GCIH, GCIA, GPEN, GSEC, GREM, or GCLD
• ITIL Foundation or PMP, particularly for candidates who will manage engineering workstreams or customer deliverables

Responsibilities

• Serve as the technical lead for cybersecurity engineering activities supporting NIH CIT enterprise services, including network, email, endpoint, server, cloud, and related infrastructure environments.
• Architect, deploy, configure, integrate, operate, and improve cybersecurity tools and technologies used to inspect and protect network traffic, email traffic, endpoints, workstations, and servers.
• Lead security engineering activities involving threat detection, event analysis, log management, vulnerability identification, remediation validation, compromise assessments, and continuous monitoring.
• Provide subject-matter expertise in security industry standards, leading practices, and control implementation, with particular emphasis on compromise assessment, threat detection, endpoint protection, and network security.
• Administer, configure, tune, and analyze outputs from security platforms such as Tenable, Splunk, BigFix, and comparable vulnerability-management, SIEM, endpoint-management, and security-monitoring tools.
• Conduct or support penetration testing, vulnerability assessments, security-control assessments, technical risk analyses, and validation of remediation activities.
• Analyze security events, vulnerabilities, system configurations, and threat indicators; identify risks; recommend mitigations; and track corrective actions through closure.
• Evaluate and help implement security controls across enterprise environments in alignment with RMF, continuous-monitoring requirements, and applicable HHS, NIH, DHS, and other federal cybersecurity policies and directives.
• Consult directly with Government stakeholders, system owners, technical teams, and program leadership on complex security-engineering issues, risk decisions, remediation strategies, and technical implementation approaches.
• Produce clear, accurate technical reports, dashboards, briefings, findings, risk assessments, remediation-status reports, and other artifacts that communicate progress and cybersecurity posture to both technical and executive audiences.
• Lead and mentor cybersecurity engineers and analysts; review technical work products; establish engineering priorities; and coordinate work across multiple concurrent cybersecurity initiatives.
• Participate in customer meetings, technical working groups, incident-related activities, and project reviews; communicate risks, dependencies, milestones, and recommended next steps.
• Develop and maintain standard operating procedures, engineering documentation, security architecture diagrams, implementation guides, and repeatable processes for cybersecurity operations.

Benefits

• 3 weeks of Personal Leave your first year
• 11 paid Holidays each year
• 5 days of Flexible Time Off each year for approved training or certifications (self-study is ineligible)
• 401(k) company match at 50% up to 10% of your salary
• Medical, Dental and Vision Insurance
• Life and Disability Insurance
• Public Transportation Subsidies
• Certifications and Training Allowance - Up to $5,000/year!

What This Job Offers

• Job Type: Full-time
• Career Level: Senior