Sr. Cybersecurity Engineer I (6861)

MetroStar•Washington, DC

3d•$100,000 - $125,000

About The Position

As a Sr. Cybersecurity Engineer I, you will support a government program by applying NIST SP 800-53 controls, monitoring security posture, analyzing vulnerabilities, and coordinating remediation across AWS, applications, APIs, and infrastructure. The role also includes junior Business Analyst and Project Manager responsibilities, such as defining security requirements, facilitating stakeholder discussions, tracking action items, and reporting progress. You will work with DHS customers and internal engineering teams to support the Risk Management Framework (RMF) process and help systems obtain and maintain a full Authority to Operate (ATO). The work includes continuous monitoring, RMF documentation, security testing, vulnerability analysis, and assisting with contingency planning, incident response, and disaster recovery exercises.

Requirements

At least five years of IT experience as a Security Lead or Information Security Analyst, including evaluating, implementing, or managing security practices for new and existing technologies.
Bachelor’s degree in Computer Science or a comparable field, or equivalent experience.
Strong understanding of NIST SP 800-53 controls and their application within the RMF.
Strong understanding of API-based security mechanisms and the OWASP framework for web application vulnerabilities; hands-on implementation is not required.
Experience with AWS architecture and technical understanding of cloud technologies used in customer environments, including microservices, containers, zero trust concepts, data streaming, or data pipelines.
Experience conducting continuous monitoring, preparing monthly status reports, and analyzing and reporting cybersecurity vulnerability scan results.
Experience assessing risk from deficiencies identified during RMF control testing and tracking corrective actions.
Experience with requirements analysis, security architecture and design, and documentation of cybersecurity or information security solutions.
Experience using cybersecurity tools or scanners to evaluate system security posture, including scanning or reporting for web applications, databases, containers, or other system components.
Working knowledge of Agile and DevSecOps practices and cybersecurity, network, systems, and software engineering principles.
Ability to gather requirements, coordinate stakeholders, facilitate meetings, and track security work through completion.
Ability to obtain and maintain DHS suitability.
An ISSO-relevant professional certification.

Responsibilities

Communicate regularly with DHS customers and internal engineering teams to lead the required RMF process and steps for assessing and authorizing a system to obtain and maintain a full ATO.
Perform monthly continuous monitoring reporting, including analysis of scans, logs, and accounts.
Support writing and reviewing RMF documentation packages for risk assessments.
Design and execute security testing plans and complete the analysis and documentation required for RMF package submission and approval.
Use vulnerability scanning tools and frameworks to evaluate system security posture.
Assist the customer in preparing training and tabletop exercises for contingency planning, incident response, and disaster recovery.
Complete ISSO USCIS-provided training as required.
Define security requirements, facilitate stakeholder discussions, track action items, and report progress.