Security Engineer

Openings & Internships•Columbia, MD

16h•Hybrid

About The Position

Cogent People Inc. is seeking a Security Engineer to implement and validate security controls across applications and environments in support of CMS and federal security requirements. This role is responsible for supporting secure system configurations, vulnerability management, and compliance activities aligned with FISMA, FedRAMP, and CMS standards. The Security Engineer works closely with the ISSO and other security stakeholders to ensure continuous monitoring and compliance readiness. The ideal candidate will bring strong hands-on security engineering experience in enterprise or regulated environments, with familiarity in DevSecOps practices and federal security frameworks. This position may be contingent upon contract award.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experience).
8+ years of experience in information security, cybersecurity engineering, or related roles.
Experience implementing security controls in enterprise or regulated environments.
Strong understanding of FISMA, FedRAMP, and federal security standards.
Experience with vulnerability management and remediation processes.
Strong analytical, communication, and problem-solving skills.
Ability to collaborate across technical and security-focused teams.
Must be a U.S. Citizen, Permanent Resident, or valid EAD holder
Must have lived in the United States for at least 3 of the past 5 years
Must be currently authorized to work in the U.S. without sponsorship

Nice To Haves

Relevant certifications
Experience supporting federal programs
Knowledge of Agile and DevSecOps
Experience with CMS or healthcare environments

Responsibilities

Implement and validate security controls across applications and environments.
Ensure alignment with CMS, FISMA, FedRAMP, and federal security standards.
Support secure configuration practices across systems and infrastructure.
Identify, track, and support remediation of security vulnerabilities.
Participate in vulnerability assessments and security reviews.
Support risk reduction efforts through timely remediation coordination.
Integrate security practices into DevSecOps pipelines and delivery workflows.
Support continuous monitoring and compliance readiness activities.
Collaborate with engineering teams to embed security into development processes.
Work closely with the ISSO and security stakeholders on compliance activities.
Support security documentation and reporting requirements.
Contribute to maintaining system authorization and audit readiness.