Назад
Company hidden
4 дня назад

Senior Information Systems Engineer (Endpoint Security & C&A)

95 000 - 110 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Information Systems Engineer (Endpoint Security & C&A) (Endpoint Security/Cybersecurity): Designing, testing, and implementing endpoint and network security solutions while supporting vulnerability reporting and federal certification/accreditation with an accent on NIST, FISMA, FedRAMP, CISA directives, and HHS security standards. Focus on engineering endpoint protections, tracking CVE/KEV remediation, integrating SIEM logging, and presenting actionable risk findings to government stakeholders.

Location: Remote in the United States

Salary: $95,000–$110,000 USD per year

Company

hirify.global is a mission-driven IT services company and systems integrator supporting digital transformation and modernization for federal government agencies.

What you will do

  • Design, test, implement, and review endpoint, network, hardware, software, firewall, and security solutions supporting federal and HHS security mandates.
  • Support endpoint devices including desktops, laptops, thin clients, tablets, mobile phones, and wearables, as well as security-service assets, refreshes, upgrades, integration, and testing.
  • Monitor CVE and CISA Known Exploited Vulnerability catalogs; develop vulnerability, remediation, risk, compliance, and monthly status reports.
  • Track CISA Binding Operational Directive deadlines and mitigate high-risk vulnerabilities within 30 days and moderate-risk vulnerabilities within 90 days.
  • Support SIEM log forwarding, audit requirements, System Security Plans, Contingency Plans, POA&Ms, Penetration Test Reports, SOPs, requirements documentation, and acceptance criteria.
  • Present security findings, remediation strategies, technical recommendations, and executive summaries to management, Government staff, HHS OIG, stakeholders, and internal technical teams.

Requirements

  • Bachelor’s degree in Information Systems, Computer Science, Engineering, or a related field, or equivalent practical experience.
  • 8+ years of experience in IT security engineering, endpoint security, vulnerability management, and certification and accreditation processes.
  • Strong knowledge of federal IT security frameworks, including NIST SP 800-53, 800-122, 800-157, 800-207, FIPS 140-2, FIPS 201-2, FedRAMP, FISMA, CISA Binding Operational Directives, and KEV reporting requirements.
  • Hands-on experience with vulnerability assessment, CVE/KEV reporting, remediation tracking, and endpoint engineering.
  • Expertise in SIEM integration and experience preparing and presenting security findings and compliance reports to executive management.
  • Strong documentation and technical writing skills, including certification and accreditation documentation.
  • Ability to obtain and maintain a Public Trust clearance.
  • Ability to follow strict security and confidentiality protocols while collaborating directly with Government staff.

Nice to have

  • Advanced degree in Cybersecurity, Engineering, or a related field.
  • Security certification such as CISSP, CISM, CISA, CEH, CompTIA Security+, or equivalent.
  • Experience supporting HHS, DHS, DoD, or other federal agencies in endpoint security and compliance reporting.
  • Expertise in Zero Trust Architecture, endpoint detection and response, and advanced vulnerability management solutions.
  • Strong presentation and stakeholder presentation skills.

Culture & Benefits

  • Employee-first environment built around Results, Innovation, Values, and Accountability.
  • Flexible and supportive work environment with opportunities to grow skills and contribute ideas.
  • Meaningful work supporting federal missions, public-sector modernization, and community-strengthening efforts.
  • Equal employment opportunity and accommodation support for applicants.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →