Cybersecurity Engineer with Security Clearance

About the role

Horizon Global Partners (HgP) is seeking a highly skilled Cybersecurity Engineer to support a Federal Government customer by designing, implementing, and maintaining enterprise security controls across cloud, network, endpoint, and identity environments. The successful candidate will help strengthen the organization’s cybersecurity posture by implementing Zero Trust Architecture, enforcing least-privilege access, supporting continuous monitoring, and responding to security threats in accordance with Federal cybersecurity standards.

This position requires experience with enterprise security operations, Identity and Access Management (IAM), cloud security, vulnerability management, SIEM/EDR/XDR platforms, and incident response within complex hybrid environments.

Responsibilities

• Enterprise Security Engineering
• Design, implement, and maintain enterprise security controls aligned with NIST SP 800-53.
• Support Zero Trust Architecture implementation in accordance with NIST SP 800-207.
• Harden enterprise systems using secure configuration baselines and industry best practices.
• Implement network and environment segmentation to protect critical assets and limit lateral movement.
• Identity & Access Management (IAM)
• Configure and administer enterprise Identity and Access Management (IAM) solutions.
• Implement Role-Based Access Control (RBAC), Privileged Access Management (PAM), and Multi-Factor Authentication (MFA).
• Enforce least-privilege access across cloud, network, and endpoint environments.
• Support Microsoft Entra ID, Active Directory, and enterprise identity providers.
• Security Operations
• Configure, monitor, and maintain SIEM, EDR, and XDR platforms.
• Implement centralized logging, log correlation, and continuous security monitoring.
• Investigate security alerts and suspicious activity.
• Support security incident triage, containment, eradication, recovery, and forensic investigations.
• Vulnerability Management
• Conduct vulnerability assessments and security risk analyses.
• Cookordination remediation efforts across servers, workstations, applications, and cloud environments.
• Support automated patch management and security update processes.
• Validate remediation activities and maintain compliance with organizational security standards.
• Cloud Security
• Secure AWS and Microsoft Azure cloud environments.
• Configure cloud identity controls, workload protections, encryption, and security services.
• Support secure cloud integrations and hybrid architectures.
• Implement cloud security best practices and continuous monitoring.
• Compliance & Governance
• Support compliance with:
• NIST SP 800-53
• NIST SP 800-207 (Zero Trust)
• NIST Risk Management Framework (RMF)
• FISMA
• Participate in audits, security assessments, risk mitigation activities, and authorization efforts.
• Develop and maintain security policies, standards, and Standard Operating Procedures (SOPs).
• Documentation & Collaboration
• Maintain system security documentation, configuration baselines, and asset inventories.
• Perform Root Cause Analysis (RCA) following security incidents.
• Support formal change management processes and security impact analyses.
• Collaborate with cloud, network, endpoint, and application engineering teams to improve enterprise security.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field (or equivalent experience).
• Minimum 5 years of enterprise cybersecurity engineering experience.
• Experience implementing security controls aligned with NIST SP 800-53.
• Experience implementing Zero Trust Architecture in accordance with NIST SP 800-207.
• Strong experience with Identity and Access Management (IAM), RBAC, PAM, and MFA.
• Experience administering SIEM, EDR, and XDR platforms.
• Experience configuring centralized logging and continuous monitoring solutions.
• Experience conducting vulnerability assessments, remediation, and security risk analysis.
• Experience securing AWS and Microsoft Azure environments.
• Experience supporting incident response, forensic investigations, and security operations.
• Excellent analytical, troubleshooting, documentation, and communication skills.

Technical Skills

• NIST SP 800-53
• NIST SP 800-207
• Zero Trust Architecture
• Identity & Access Management (IAM)
• Microsoft Entra ID
• Active Directory
• RBAC
• PAM
• MFA
• SIEM
• EDR
• XDR
• Microsoft Sentinel
• Splunk
• AWS Security
• Microsoft Azure Security
• Cloud Security
• Vulnerability Management
• Continuous Monitoring
• Security Information and Event Management
• Incident Response
• Forensic Data Collection
• Network Segmentation
• Change Management
• Security Baselines
• Security Policies
• SOP Development
• PowerShell
• Python (preferred)

Preferred Certifications

• CISSP
• CISM
• CompTIA Security+
• GISC
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security
• MCSE: Security+
• MCSE: Security