Senior Cyber Security Engineer

ECS Tech Inc•Fairfax, VA

2d•$165,000 - $200,000

About The Position

At Everforth ECS Federal, we believe technology should serve those who have served us. Partnering with the U.S. Department of Veterans Affairs, we safeguard critical systems and sensitive data that directly impact the lives of millions of veterans and their families. As a Senior Cyber Security Engineer, you will bring your deep technical expertise with regulatory compliance, strategic planning, and cross-functional leadership to protect Veterans’ data and VA systems.

Requirements

Must be a U.S. citizen eligible to obtain and maintain a Tier 5 (critical sensitive national security) background investigation.
8+ years in cybersecurity operations, ideally within a federal or VA environment.
8+ years securing enterprise networks, cloud environments, and hybrid architectures, including zero-trust principles
8+ years designing and implementing secure system architectures and zero-trust models
8+ years working with Python, PowerShell, or Bash for automating security tasks, vulnerability scanning, and log analysis.
Deep understanding of firewalls, intrusion detection/prevention systems (IDS/IPS), VPNs, network segmentation, TCP/IP, and wireless security.
Ability to detect, analyze, and mitigate cyber threats quickly, minimizing damage and downtime; familiarity with NIST, SANS, and CIS frameworks.
Experience with NIST, ISO, SOC 2, and other federal security standards.
Moderate to advanced knowledge of Windows, Linux, VMs, containers, and server administration.
Understanding of federal regulations (e.g., FISMA, HIPAA for VA health data) and ability to map security controls to compliance requirements.

Responsibilities

Support ZTA initiatives, ensuring access controls and segmentation are enforced across cloud and on-prem environments.
Conduct vulnerability assessments and recommend remediation strategies.
Collaborate with VA stakeholders to ensure compliance with FedRAMP and VA-specific security requirements.
Develop and enforce security policies and ensure compliance with regulatory standards.