Cyber Security Engineer 3

Position Summary

The Cybersecurity Engineer 3 designs, implements, and manages security solutions to protect networks, systems, and applications. This role conducts security assessments, supports incident response, implements security controls aligned to government frameworks, and collaborates across IT, software development, and compliance teams to integrate security throughout the development lifecycle in classified and regulated environments.

Essential Duties and Responsibilities

• Design, implement, and manage security solutions, including firewalls, intrusion detection and prevention systems, endpoint protection, and encryption mechanisms.
• Conduct regular security assessments to identify vulnerabilities and weaknesses in systems, networks, and applications.
• Develop and implement incident response plans to address security breaches and incidents.
• Collaborate with cross-functional teams to establish and enforce security policies, standards, and procedures.
• Monitor network traffic, system logs, and security alerts to detect and respond to potential security incidents.
• Analyze and investigate anomalies and security breaches and take appropriate actions to mitigate risks.
• Work closely with IT, software development, and compliance teams to integrate security into all phases of the development lifecycle.
• Maintain thorough and accurate documentation of security processes, procedures, and configurations.
• Prepare detailed reports on security findings, incidents, and actions taken.

Required Qualifications

• Active TS/SCI with CI Polygraph.
• 7+ years of experience as a cybersecurity engineer with a specialization in designing and building implementations of required security controls and implementing continuous monitoring and auditing of solutions for compliance with security controls.
• Bachelor’s degree or equivalent relevant experience in lieu of a degree
• Strong skills in specifying and implementing log collection into tools such as Splunk, and performing querying and analysis of aggregated logs to identify security-relevant anomalies or risks.
• Strong experience implementing security controls from government regulatory frameworks and security standards, including NIST SP 800-53, RMF, ICD 503, FISMA, and FedRAMP.
• Experience implementing controls for cloud, container, and DevSecOps services and solutions within IL5 to IL6+ environments.
• Strong understanding of network protocols, operating systems, and infrastructure components.
• Proficiency in incident response, security incident handling, and forensic analysis techniques.
• Experience with security tools such as Fortify, Acunetix, and Prisma Cloud.
• Effective communication skills, with the ability to convey complex technical concepts to both technical and non-technical stakeholders.
• CISSP or equivalent certification to support DoD 8140 requirements.

Preferred Qualifications

• Not specified.

Required Education and Experience Equivalency

Required Certifications

• CISSP or equivalent certification to support DoD 8140 requirements.

Required Security Clearance

• Active TS/SCI with CI Polygraph.