Cyber Security Engineer (5462)

Location: Remote within the United States, supporting a Herndon, Virginia-based team. U.S. citizenship and the ability to obtain and maintain a Secret or higher security clearance are required.

Salary: $103,100–$171,820 USD per year.

Company

hirify.global provides technical and domain expertise, secure digital transformation, and compliant solutions for defense, national security, healthcare, and other government missions.

What you will do

• Provide cybersecurity engineering, compliance, and risk-management support for FedRAMP- and DoD-authorized cloud environments, including IL4–6.
• Advise partners, customers, engineers, and government stakeholders on federal security requirements, authorization strategies, and audit readiness.
• Develop and maintain SSPs, SAPs, SARs, POA&Ms, FedRAMP appendices, policies, and supporting control evidence.
• Support RMF and FedRAMP authorization, reauthorization, gap assessment, control validation, remediation, and continuous-monitoring activities.
• Collaborate with cloud engineering and DevOps teams to implement and validate controls across AWS, Azure, and hybrid environments.
• Use GRC platforms, APIs, scripts, and automation to improve evidence collection, control testing, documentation, reporting, and remediation tracking.

Requirements

• U.S. citizenship and eligibility to obtain and maintain a Secret or higher security clearance.
• Bachelor’s degree in information security, cybersecurity, computer science, or a related field, or equivalent practical experience.
• Five or more years of cybersecurity experience, including at least three years in federal cloud security engineering, information assurance, RMF, or ISSO functions.
• Knowledge of NIST SP 800-53 Rev. 5, FedRAMP Moderate and High, DoD IL4–6 overlays, RMF, and related federal compliance frameworks.
• Hands-on experience with AWS, Azure, or hybrid cloud environments and security capabilities including IAM, encryption, logging, configuration management, and monitoring.
• Experience with GRC platforms, APIs, scripting, or automation; familiarity with eMASS, Paramify, Nessus/Tenable, Splunk, Prisma Cloud, or comparable tools.

Nice to have

• FedRAMP, DoD, DISA, or federal agency ATO experience.
• Python, PowerShell, REST APIs, infrastructure-as-code, or cloud-native automation experience.
• Experience with DevSecOps pipelines, automated security testing, policy-as-code, and continuous control validation.
• CISSP, CGRC/CAP, CISM, Security+, or a similar cybersecurity certification.

Culture & Benefits

• Remote work supporting a United States-based team.
• Health insurance, paid leave, and retirement benefits.
• Learning and development opportunities.
• Work focused on secure mission acceleration and highly assured government solutions.