Cyber Security Engineer

Location: Ft Meade, MD (Hybrid)

Clearance: Active Public Trust

Job Category: IT

About the role

The Cyber Security Engineer provides hands‑on cybersecurity engineering and operational security support for enterprise applications and cloud environments. The role works with system owners, security personnel, application teams, DevSecOps engineers, and operations teams to maintain security compliance, identify and remediate vulnerabilities, support continuous monitoring, and protect sensitive information.

Responsibilities

• Provide cybersecurity engineering support across development, testing, staging, and production environments.
• Support security of applications and infrastructure hosted within Google Cloud Platform (GCP).
• Implement and maintain technical security controls consistent with applicable organizational and federal security requirements.
• Support security authorization, assessment, and continuous monitoring activities.
• Identify, analyze, track, prioritize, and support remediation of application, infrastructure, cloud, and configuration vulnerabilities.
• Review security scan results, assess findings, coordinate remediation with engineering and development teams, and validate corrective actions.
• Develop and maintain security artifacts and supporting documentation for identified vulnerabilities and remediation activities.
• Integrate automated security testing and security controls into DevSecOps and CI/CD processes.
• Support incident response, investigation, containment, remediation, and root‑cause analysis.
• Support security logging, monitoring, alerting, and audit capabilities.
• Develop and maintain security documentation and evidence supporting security assessments, audits, releases, and change‑control activities.
• Protect PII, sensitive information, and system data from unauthorized access, disclosure, modification, or loss.
• Participate in Agile/SAFe planning, sprint activities, technical working sessions, and security reviews.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field, or equivalent relevant experience.
• 5+ years of cybersecurity engineering, security operations, or information systems security experience.
• Experience securing cloud‑hosted applications and infrastructure, preferably within Google Cloud Platform (GCP).
• Familiarity with NIST SP 800‑53, FISMA, RMF, vulnerability management, continuous monitoring, and security control implementation.
• Experience with vulnerability scanning, security monitoring/logging, incident response, and DevSecOps security practices.
• Experience supporting security assessments and remediation of identified vulnerabilities.
• Required certification: CompTIA Security+ or equivalent industry‑recognized security certification.
• Preferred certifications: CISSP, CCSP, Google Cloud Professional Cloud Security Engineer, CompTIA CySA+, GIAC certifications.

Benefits

• Competitive compensation.
• Comprehensive benefits package.
• Career development opportunities.
• Collaborative, flexible, and forward‑thinking work environment.
• Opportunity to contribute to impactful government initiatives that enhance national security and public welfare.