Senior Security Engineer

NetImpact Strategies•Bethesda, MD

6d•$109,000 - $144,000•Onsite

About The Position

NetImpact Strategies is seeking a Security Engineer to join its onsite team in Bethesda, Maryland. The role focuses on implementing secure and resilient infrastructure changes and advanced IT security enhancements. The engineer will manage an ITIL-based configuration and change management framework aligned with NIST SP 800-128, and oversee cloud-based and on-premises infrastructure using cybersecurity strategies to support performance, security, and compliance. The position supports critical network and security functions and requires lifecycle security documentation, continuous monitoring, risk mitigation, and support for Security Assessment and Authorization activities. The role may require off-hours support for security remediation.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field; the posting notes that some senior roles may prefer or require a master’s degree.
At least 6 years of experience in information security or a related IT field.
Experience with endpoint monitoring using BigFix.
Experience using IBM BigFix to manage and secure endpoints, including virtual, cloud, and on-premises devices.
Relevant certifications such as CISSP, CISM, CompTIA Security+, or CCSP.
Effective written and verbal communication skills for documentation, explaining technical concepts to non-technical stakeholders, and cross-functional collaboration.
Analytical thinking, problem-solving ability, attention to detail, and ability to work under pressure.
Understanding of regulatory compliance requirements such as HIPAA and standards such as ISO 27001 and NIST frameworks is beneficial.

Nice To Haves

Federal consulting industry experience.

Responsibilities

Design and implement secure infrastructure modifications, providing technical and systems engineering consultancy.
Develop and manage a configuration and change management framework aligned with NIST SP 800-128, using automation and predictive analytics.
Deploy and maintain computing and communication technologies in compliance with NIST standards.
Apply the Risk Management Framework to achieve Security Authorization objectives and improve institutional resilience.
Provide primary support for firewall management, IP address allocation, and incident response.
Develop and maintain documentation and testing protocols for cloud-based and on-premises server configurations.
Follow a change management process aligned with the NIH Configuration Management Plan, including review and security impact analysis.
Optimize endpoint security using tools such as HCL BigFix for patch deployment and vulnerability management.
Automate security certificate processes and other security-related tasks.
Implement AI-driven tools for proactive server and endpoint monitoring.
Partner with security personnel on annual Contingency Plan and Incident Response testing.
Produce security reports and lifecycle documentation in accordance with federal standards and guidelines.
Implement Information Security Continuous Monitoring (ISCM) and mitigate security risks throughout the system lifecycle.
Maintain cloud-service security requirements, including FedRAMP compliance, data jurisdiction, and interconnection agreements.
Provide documentation for Security Assessment and Authorization processes, including System Security Plans and Security Assessment Reports.
Support security remediation activities off hours as required.

Benefits

Comprehensive medical, dental, and vision insurance beginning the first of the month after joining.
401(k) plan with immediately vested employer contributions; no matching required.
Paid time off (PTO).
One additional paid wellness leave day per calendar year.
Ten federal holidays observed.
Pet insurance.
Tuition reimbursement.
Internal training programs.
Company-sponsored industry certifications.
Team-building activities, community volunteering, quarterly HQ days, wellness events, happy hours, and family events.