Cyber Security Engineer

Overview

We are seeking a Cybersecurity/Technical Engineer responsible for designing, implementing, and maintaining secure systems across complex enterprise environments. This role will support security architecture, identity and access management (IAM), authentication and authorization hardening, vulnerability management, and continuous security monitoring throughout the system lifecycle.

The Cybersecurity/Technical Engineer will work across technical teams to ensure security requirements are incorporated into system design and implementation, identify and track vulnerabilities, evaluate security controls, and monitor environments for emerging risks. This role requires broad hands-on cybersecurity experience and the ability to apply security principles across systems, infrastructure, applications, and cloud environments.

Contributions

Design and implement systems and technical solutions with security requirements incorporated throughout the system lifecycle

Support security architecture and engineering activities to ensure systems align with established security requirements and best practices

Implement and maintain identity and access management (IAM) controls, including authentication and authorization mechanisms

Apply least-privilege principles and access controls to reduce unauthorized access and security risk

Assess and harden systems, configurations, authentication mechanisms, and authorization controls

Identify, assess, document, and track vulnerabilities across systems and environments

Partner with technical teams to prioritize and remediate identified vulnerabilities and security weaknesses

Conduct follow-up assessments and continuous monitoring to identify newly introduced or recurring vulnerabilities

Implement and support tools and processes used for vulnerability identification, security monitoring, and control validation

Monitor systems and security data to identify potential vulnerabilities, configuration weaknesses, threats, and anomalous activity

Support security activities throughout the system lifecycle, including design, implementation, operation, maintenance, and system changes

Evaluate technical changes and system configurations for potential security impacts

Collaborate with system administrators, cloud engineers, software engineers, cybersecurity teams, and other technical stakeholders to implement and maintain security controls

Support security documentation, technical findings, remediation tracking, and reporting aligned with established security requirements

Maintain awareness of evolving vulnerabilities, threats, security technologies, and cybersecurity engineering practices

Qualifications

Required:

Ability to obtain and maintain a government security clearance

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Information Systems, or a related technical discipline, or equivalent relevant experience

5+ years of experience in cybersecurity engineering, security architecture, systems security, or related technical cybersecurity disciplines

Hands-on experience designing, implementing, or securing enterprise systems and technical environments

Experience with identity and access management (IAM), authentication, authorization, and least-privilege security principles

Experience identifying, assessing, tracking, and supporting remediation of system vulnerabilities

Experience implementing or supporting continuous security monitoring and vulnerability management processes

Knowledge of security architecture, system hardening, secure configuration, and security control implementation

Experience with security monitoring, vulnerability management, endpoint security, or cloud security technologies

Understanding of system lifecycle management and the integration of security requirements throughout system design, implementation, and operations

Experience analyzing technical security findings and identifying appropriate remediation or risk mitigation actions

Experience documenting security findings, technical requirements, remediation activities, and system security information

Strong analytical, troubleshooting, problem-solving, communication, and collaboration skills

Preferred:

Experience with security platforms and tools such as CrowdStrike, Tanium, Wiz, Splunk, or similar technologies

Experience with governance, risk, and compliance (GRC) platforms or security compliance management tools

Experience securing cloud environments and implementing cloud security controls

Experience supporting security architecture across complex enterprise environments

Knowledge of federal cybersecurity requirements, security controls, and continuous monitoring practices

Experience working within federal government or other highly regulated environments

Relevant cybersecurity certification such as CISSP, Security+, GIAC, or equivalent

About steampunk

Steampunk relies on several factors to determine salary, including but not limited to geographic location, contractual requirements, education, knowledge, skills, competencies, and experience. The projected compensation range for this position is $85,000 to $170,000. The estimate displayed represents a typical annual salary range for this position. Annual salary is just one aspect of Steampunk's total compensation package for employees. Learn more about additional Steampunk benefits here.

Identity Statement

As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

Steampunk is a Change Agent in the Federal contracting industry, bringing new thinking to clients in the Homeland, Federal Civilian, Health and DoD sectors. Through our Human-Centered delivery methodology, we are fundamentally changing the expectations our Federal clients have for true shared accountability in solving their toughest mission challenges. If you want to learn more about our story, visit http://www.steampunk.com.

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.Steampunk participates in the E-Verify program.

#J-18808-Ljbffr