Cybersecurity Engineer

Pioneering Evolution is seeking a Cybersecurity Engineer to support the security engineering and compliance activities of SyncPoint, a DoD financial system operating in a Department of Defense Impact Level 4 (IL4) environment. This hands‑on role focuses on implementing security requirements, automating compliance activities, collecting and validating evidence, and supporting the program’s Authority to Operate (ATO) and ongoing assessment readiness.

Responsibilities

• ATO and Compliance Support: Support development and maintenance of ATO and compliance artifacts (System Security Plan, control implementation statements, POA&Ms, procedures, and supporting evidence). Collect, organize, and validate technical evidence. Assist leadership with security reviews, assessment preparation, remediation tracking, and response to assessor findings. Implement and validate NIST SP 800‑171, CMMC Level 2, RMF, and applicable DoD security requirements. Document technical implementations accurately and assist with gap assessments.
• Security Automation and Continuous ATO: Develop scripts, tooling, and automated workflows to reduce manual compliance and security‑validation activities. Automate collection of security evidence from cloud platforms, operating systems, CI/CD pipelines, repositories, and security tools. Create automated configuration checks and compliance validations to identify drift from approved baselines. Integrate security checks into CI/CD and infrastructure deployment workflows. Support automated vulnerability, configuration, and compliance scanning and normalize findings into actionable remediation tasks. Help develop repeatable processes for continuous monitoring and a Continuous ATO model.
• Cloud and Infrastructure Security: Implement and validate security configurations within Microsoft Azure Government and related application infrastructure. Support identity and access controls (RBAC, managed identities, least privilege, privileged access, service identities). Review cloud and Infrastructure as Code configurations for alignment with security requirements. Secure networking, logging, encryption, secrets management, and workload access controls. Assist DevSecOps engineers with secure container, Kubernetes, deployment, and infrastructure configurations.
• Security Monitoring and Remediation: Review security alerts, vulnerability findings, configuration findings, and audit information to identify technical risks. Work with engineering and infrastructure teams to investigate findings and implement remediation. Support vulnerability‑management activities (validation, prioritization, remediation tracking, verification). Maintain logging, monitoring, and audit capabilities for incident investigation and compliance evidence. Document findings and communicate technical risk clearly to engineering and program leadership.
• Secure Engineering Collaboration: Work with developers and DevSecOps engineers to incorporate security requirements into application, infrastructure, and deployment workflows. Translate security requirements into clear engineering tasks and practical implementation guidance. Support secure handling of Controlled Unclassified Information (CUI) within application and infrastructure workflows. Identify opportunities to replace manual security processes with automated, repeatable technical controls. Contribute to security documentation, engineering standards, implementation procedures, and lessons learned.

Technical Environment

• Compliance: NIST SP 800‑171, CMMC Level 2, RMF, ATO, CUI
• Cloud: Microsoft Azure / Azure Government
• Infrastructure: Linux, Windows, containers, Kubernetes
• Identity: Entra ID, RBAC, Managed Identity, least privilege
• Infrastructure as Code: Bicep, Terraform or comparable technologies
• Security Tooling: Vulnerability scanning, configuration assessment, cloud security monitoring, logging/SIEM
• Automation: PowerShell, Python, Bash, Azure CLI or comparable scripting/tooling
• DevSecOps: Git, CI/CD pipelines, automated security testing, secrets management
• Documentation: SSP supporting artifacts, POA&Ms, control evidence, procedures, implementation documentation

Key Competencies

• Practical cybersecurity engineering and troubleshooting
• Security and compliance automation
• Cloud security fundamentals
• Ability to translate security requirements into technical implementation tasks
• Scripting and process automation
• Security‑control validation and evidence collection
• Clear technical documentation
• Effective collaboration with engineering, DevSecOps, cybersecurity leadership, and external partners

Required Experience

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related technical discipline, or equivalent professional experience
• 3+ years of professional experience in cybersecurity, systems engineering, cloud engineering, DevSecOps, or a closely related technical field
• Hands‑on experience implementing, validating, or supporting technical security controls
• Working knowledge of NIST SP 800‑171 or comparable security‑control frameworks
• Experience with Microsoft Azure, AWS, or another major cloud platform (identity, networking, logging, encryption, access‑control concepts)
• Experience with scripting or automation using PowerShell, Python, Bash, Azure CLI, or comparable technologies
• Experience working with Git‑based development or infrastructure workflows
• Familiarity with vulnerability management, security configuration assessment, or compliance‑scanning tools
• Strong analytical and troubleshooting skills
• Strong written and verbal communication skills, including clear documentation of technical implementations and findings

Required Certification

CompTIA Security+ or another certification satisfying the applicable DoD 8140 workforce qualification requirement for the position.

Desired Experience

• Experience supporting a DoD RMF or ATO effort
• Familiarity with CMMC Level 2 and NIST SP 800‑171 assessment activities
• Experience automating security‑control validation, compliance evidence collection, or continuous‑monitoring activities
• Experience with DISA STIGs, SCAP, or automated security configuration assessment
• Experience with Azure Government or other DoD‑authorized cloud environments
• Experience with Infrastructure as Code such as Bicep or Terraform
• Experience integrating security tools or policy checks into CI/CD pipelines
• Familiarity with container and Kubernetes security
• Experience with Microsoft Defender for Cloud, Sentinel, Azure Monitor, or comparable security‑monitoring platforms
• Familiarity with Controlled Unclassified Information (CUI) handling requirements
• CAP/CGRC, Microsoft cloud‑security certifications, or similar technical/compliance certifications (beneficial but not required)

Benefits

• Competitive salary
• Paid time off and 10 paid holidays
• Medical, dental, and vision insurance
• Legal assistance
• Company‑paid life insurance and AD&D
• Company‑paid short‑term and long‑term disability insurance
• Tuition reimbursement
• 401(k) plan with company contribution
• Continuing education opportunities