> Markdown version of [/jobs/ext/1503585-cybersecurity-engineer](https://www.wearedevelopers.com/jobs/ext/1503585-cybersecurity-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Engineer

- **Company:** The Finch
- **Location:** Washington, DC, United States
- **Experience:** Experienced
- **Salary:** $130,000.0 - $225,000.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing Security, Cyber Security, Zero Trust Network Access, Security Information and Event Management, Devsecops, Vulnerability Analysis
- **Published:** July 30, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=434652f1ea0a8b61

## About the Role

* Experience implementing and maintaining cybersecurity controls in a federal/DoD environment.
 * Working knowledge of NIST 800-53, RMF, and vulnerability management tools.
 * Experience supporting missions for DoW, DHS, FBI, or another national security agency.
 * DoD 8140/8570-compliant certification (e.g., Security+, CySA+, CISSP) commensurate with level.
 * Willingness to work onsite in the DC metro area as required.

Preferred Skills

 * CISSP, CASP+, or CEH certification.
 * Experience with cloud security (AWS/Azure GovCloud) and Zero Trust architectures.
 * Experience with SIEM tools and incident response., 3-15 years of relevant experience, with placement (Mid, Senior, or Lead) commensurate with demonstrated experience. Bachelor's degree in a related field preferred; equivalent professional experience will be considered in lieu of a degree.

## Description

* Design, implement, and maintain security controls to protect mission systems and data.
 * Conduct vulnerability assessments, security scanning, and remediation tracking.
 * Support Assessment and Authorization (A&A)/RMF activities, including SSPs, POA&Ms, and continuous monitoring documentation.
 * Monitor security events and respond to incidents in coordination with the SOC.
 * Implement and maintain endpoint, network, and cloud security tools.
 * Support compliance with applicable security frameworks (NIST 800-53, CMMC, DoD RMF).
 * Collaborate with engineering teams to embed security into the development lifecycle (DevSecOps).


## Related Videos

- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)