Cybersecurity Engineer, Lead

The Lead Cybersecurity Engineer role at Indigo IT focuses on vulnerability and configuration compliance for Windows and MacOS end-user devices. Working within the OIT End-User Device IT Management Services team, you will support RMF continuous monitoring and audit-ready security activities, while also developing procedures and generating auditable security evidence.

Role Responsibilities

• Support execution of the Risk Management Framework across all facets, with emphasis on Continuous Monitoring.
• Participate in and lead Security Assessment & Authorization (SA&A) activities as required.
• Perform conformance testing to determine whether systems meet defined specifications, including system and application baselines.
• Assist team members using test bed environments to validate hardware and support peripherals against specifications, recording and analyzing test data.
• Create auditable evidence of implemented security measures.
• Support Independent Validation and Verification (IV&V) testing for software applications and systems, including conducting and monitoring testing activities.
• Advise senior leadership or the Authorizing Official on actions that affect the organization’s information assurance posture.
• Collect and maintain system information assurance reporting data.
• Coordinate with team members to ensure information assurance inspections, tests, and reviews are aligned for the environment.
• Perform operational security tasks as assigned, including incident handling and analysis, and prepare reports to keep senior leadership informed.
• Use existing security tools to perform RMF continuous monitoring activities.
• Analyze port, protocol, and network traffic information to support real-time decisions about organizational security posture.
• Adhere to information assurance requirements integrated into system and organizational continuity planning.
• Provide subject matter expertise to support corporate business development, including proposal development, white papers, and requests for information as needed.

Security, Compliance, and Validation Focus

This position includes collaboration with the end-user device management services team to support RMF continuous monitoring, SA&A, IV&V testing, and preparation of auditable security evidence.

Required Qualifications

• Current CBP Background Investigation or Top-Secret clearance adjudicated within the last 5 years (preferred).
• At least 5 years of hands-on experience detecting, monitoring, and remediating security issues across network, hardware, software, and platform security.
• Demonstratable experience performing compliance control testing, identifying and resolving cybersecurity issues, and developing remediation or mitigation strategies.
• Bachelor’s or master’s degree in Cybersecurity, Computer Science, Computer Information Systems, or Information Technology (master’s preferred).
• In lieu of a degree, 10 years of hands-on experience in control testing, vulnerability identification and resolution, and recommendations to minimize cybersecurity risk will be considered.
• Must hold one or more certifications: ISC2 CISSP, EC-Council Certified Ethical Hacker, or CompTIA Security Analytics Expert (equivalent certifications may be considered).

Technologies and Tools

• Windows, MacOS
• Tenable Nessus
• Security Center
• Tanium
• Splunk
• SEIM
• ISVM
• STIGs
• GPO/Group Policy
• CISA KEV list

Additional Knowledge, Skills, and Abilities

• Advanced or expert knowledge and/or work experience in Information Certification & Accreditation regulations, FISMA, and NIST guidance.
• Ability to identify, collect, process, document, and report cyber security and incident response events.
• Experience developing and implementing cyber security and incident response policies and procedures, including engineering, testing, installing, patching, and upgrading security hardware and software.
• Contingency plan creation, modification, and testing.
• Zero Trust implementation experience.
• Experience with Tenable Nessus, Security Center, and Tanium (or similar tools).
• Experience with Splunk or other SEIM.
• Experience with ISVM, security patching and vulnerabilities, configuration (STIGs), and GPO/Group Policy.
• Experience with CISA KEV list and implementation deadlines.
• Operations-based testing scenarios.
• Ability to recommend improvements to internal processes to improve customer service levels and overall security posture.
• Strong analytical skills to evaluate data sets, identify trends, establish strategies, and make decisions about real-time threats, including reduction of false positives from operational reporting.
• Strong time management, organizational skills, and ability to juggle multiple priorities.
• Excellent interpersonal and communication skills to work across diverse audiences.
• Self-starter attitude and ability to work independently and as part of a team, owning tasks from start to finish.
• Experience leading teams and providing feedback to junior members.
• Familiarity with FISMA law, working with FISMA systems, maintaining and acquiring Authority to Operate, and assisting with Authority to Test phases.
• Ability to write Risk Acceptance proposals.
• Experience working with technology evaluation boards to support enterprise product and service evaluation.
• Support ISSO/ISSM coordination for tracking and closing Plans of Actions and Milestones (POA&Ms).
• Provide expert guidance to management based on findings brought in from the Vulnerability Assessment Team (VAT) in coordination with the ISSO.
• Support junior staff with accurate FISMA system inventory for asset management and VAT scanning purposes.

Education

• Master’s degree in Cybersecurity, Computer Science, Computer Information Systems, or Information Technology.
• Bachelor’s degree also accepted (as listed under requirements).

Compensation and Location

• Location: Ashburn, VA (hybrid)
• Salary: USD 90,000 - 115,000 per year
• Minimum Experience: 5 years

Company Overview

Indigo IT was founded in 2001 and provides information technology consulting and services. The company supports government agencies seeking Cloud, Cybersecurity, Knowledge Management, and Enterprise solutions, with a mission focused on maintaining urgency in anticipating and supporting customer technology goals. Indigo IT has been recognized on the Inc. 5000 list of America’s fastest growing companies in 2020 and 2021, and was named one of the 2022 Best Places to Work in Virginia.

Benefits

• Medical, Dental, and Vision coverage options
• 401(k) with company match
• Group life and disability
• Flex Spending Accounts (FSA)
• Paid Time Off (PTO)
• Paid holidays
• Education assistance
• In house training programs for employees
• Bonuses and recognition for publishing, speaking, and innovative thought leadership