Lead Security Engineer (Cybersecurity)

TL;DR

Lead Security Engineer (Cybersecurity): Designing and implementing technical security capabilities to support RMF execution and FISMA requirements for federal enterprise operations with an accent on security controls and operational hardening. Focus on translating federal requirements into technical designs, optimizing security engineering practices, and managing Splunk Enterprise Security.

Location: D.C., Maryland, Virginia (Arlington); must be able to work in classified environments within government controlled secure facilities

Company

A veteran-owned small business providing top-tier cybersecurity and technology services to federal customers.

What you will do

• Lead cybersecurity engineering activities for enterprise systems and security capabilities.
• Design and implement technical security controls aligned with RMF and FISMA requirements.
• Develop and maintain secure configurations, engineering standards, and technical documentation.
• Implement technical continuous monitoring and automation capabilities.
• Use MITRE ATT&CK to identify control gaps and recommend technical remediation priorities.
• Provide administration and engineering support for Splunk Enterprise Security.

Requirements

• Bachelor’s degree in Cybersecurity, IT, Computer Science, Engineering or equivalent experience.
• Strong experience in cybersecurity engineering and implementing secure federal enterprise systems.
• Proficiency in RMF-driven control implementation and FISMA requirements.
• Experience using MITRE ATT&CK to assess defensive coverage and plan remediations.
• Top Secret/SCI Clearance (Final) required.
• Required Certifications: CISSP, ISSEP, and Splunk Certified Enterprise Security Admin.

Culture & Benefits

• 100% of medical premiums covered by the company.
• 401k program with 100% company match on the first 4%.
• 3 weeks of PTO starting plus 11 paid holidays annually.
• Monthly reimbursement for cell phone and home internet costs.
• Investment in professional training and certifications.
• New business incentive programs and contribution incentives for technical publications.