CompTIA Cybersecurity Analyst

We are seeking a hands-on Cyber Security Engineer with strong network engineering expertise who enjoys designing, configuring, and securing modern networks while documenting solutions so others can support them. You will work closely with a small, tight-knit team to build secure, well-structured network architectures, enhance remote access capabilities, strengthen monitoring and security operations, and support virtualization and backup platforms in a demanding R&D and manufacturing environment. Responsibilities

• Design, configure, and maintain firewall policies using SonicWall NSa and TZ series to ensure robust perimeter security and effective network segmentation.
• Develop and implement layered network segmentation between LAN, server, Wi-Fi, and VPN environments to reduce risk and improve security posture.
• Engineer and support enterprise Wi-Fi solutions, including RADIUS authentication and TACACS+ integration, to provide secure wireless access.
• Integrate wireless and identity solutions with Active Directory to streamline user authentication and access control.
• Configure and maintain captive portal and landing page workflows to manage guest and user access to wireless networks.
• Modernize and optimize remote access solutions using OpenVPN and SonicWall SMA to deliver secure, reliable connectivity for remote users.
• Redesign and modernize network architecture into a Core, Distribution, and Access layer model, improving scalability, performance, and manageability.
• Configure core network components to handle routing, VLAN trunking, and VPN trunking, ensuring efficient and secure traffic flow.
• Maintain and improve network and system monitoring using tools such as Lansweeper and Darktrace to detect issues and security threats proactively.
• Support endpoint and security tooling, such as CrowdStrike, to enhance detection, response, and protection capabilities across the environment.
• Configure and support virtualization platforms including VMware and Proxmox, as well as storage area networks (SANs), to ensure reliable infrastructure services.
• Ensure and maintain system backups using Veeam, regularly validating backup integrity and recovery procedures.
• Apply network security and hardening best practices across firewalls, switches, routers, Wi-Fi, and virtualized environments.
• Troubleshoot complex networking issues involving TCP/IP, DNS, DHCP, VLANs, and Layer 1-7 concepts, including broadcast and multicast behavior.
• Produce clear, comprehensive documentation for network designs, configurations, and operational procedures to support ongoing maintenance and knowledge sharing.
• Collaborate closely with team members in a security-minded, team-first environment to deliver reliable solutions that meet mission-critical requirements., Phishing Operations Leadership Management Mitigation AI Security Team Oriented Data Security Cyber Security Cloud Security Email Security Security Tools Self-Motivation Network Routing Computer Science Network Security Cyber Operations Google Workspace Incident Response Business Valuation Amazon Web Services Information Privacy Data Classification Security Engineering Lifecycle Management Programming Languages Packaging And Labeling Information Technology Full Stack Development Email Service Providers Artificial Intelligence Business Transformation Configuration Management Identity And Access Management Enterprise Application Software Troubleshooting (Problem Solving) SMTP (Simple Mail Transfer Protocol) +0 Cybersecurity Engineer SME Leidos

Bethesda, MD*On-Site

Linux CI/CD Splunk Nessus Rapid7 Ansible Auditing Firewall Equities Scripting SonarQube DevSecOps Pipelines Operations Automation Purchasing Upskilling Market Data Coordinating Oracle Cloud Cryptography Investigation Cyber Security Key Management Risk Management Authentications Cloud Computing Ancient History Network Security Security Controls Incident Response CompTIA Security+ Digital Forensics System Monitoring Endpoint Security Cyber Engineering Analytical Method Windows PowerShell AWS CloudFormation Systems Engineering Amazon Web Services Time Off Management Security Engineering Software Development Contingency Planning Signals Intelligence Programming Languages Regulatory Frameworks Vulnerability Scanning Security Configuration Cyber Security Policies Configuration Management Vulnerability Management Certified Ethical Hacker Cyber Security Standards Cybersecurity Compliance Risk Management Framework Authorization (Computing) Cyber Threat Intelligence Cyber Security Assessment IT Security Documentation Agile Software Development Splunk Enterprise Security Google Cloud Platform (GCP) Computer Network Operations Change Management Processes Information Systems Security Customer Information Systems React.js (Javascript Library) Python (Programming Language) Enterprise Application Software Endpoint Detection And Response Troubleshooting (Problem Solving) Host Based Security System (HBSS) Intrusion Detection And Prevention CompTIA Cybersecurity Analyst (CySA+) Plan Of Action And Milestones (POA&M) Security Information And Event Management (SIEM) Certified Information Systems Security Professional Top Secret-Sensitive Compartmented Information (TS/SCI Clearance) +0 Firewall Engineer Leidos

Arlington, VA*On-Site

Firewall Equities DevSecOps Operations Management Automation Market Data Consolidation Cyber Security Self-Motivation Working Capital Cloud Migration Service Catalog Virtual Routers Ancient History Customer Service Security Clearance Service Management Security Solutions Technology Roadmaps Networking Hardware Information Sharing GIAC Certifications Palo Alto Firewalls CompTIA Security+ CE Continuous Integration Continuous Development Web Application Security IAT Level II Certification Virtual Private Networks (VPN) Internet Protocol Security (IP SEC) CompTIA Cybersecurity Analyst (CySA+) Systems Security Certified Practitioner Information Technology Infrastructure Library GIAC Security Essentials Certification (GSEC) Counter Intelligence Polygraph (CI Clearance) GIAC Global Industrial Cyber Security Professional Cisco Certified Network Associate Security (CCNA Security) Top Secret-Sensitive Compartmented Information (TS/SCI Clearance) +0 Login | JoinContact

Tooling OpenVPN Proxmox Firewall Trunking SonicWall Hardening Visionary Innovation Scalability Reliability Multicasting Communication Cyber Security Systems Design Backup Devices Virtualization Risk Reduction Authentications Radio Frequency Network Routing IBM LAN Servers Active Directory Network Switches Network Security Complex Networks System Monitoring Endpoint Security Cyber Engineering Workflow Management Systems Integration Computing Platforms Network Engineering Network Segmentation Network Architecture Signals Intelligence Remote Access Systems Network Infrastructure Artificial Intelligence Wireless Communications Engineering Design Process Storage Area Network (SAN) Verbal Communication Skills Professional Responsibility Software Defined Radio (SDR) VLAN Trunking Protocol (VTP) Continuous Improvement Process Virtual Private Networks (VPN) Troubleshooting (Problem Solving) Virtual Local Area Network (VLAN) Dynamic Host Configuration Protocol (DHCP) Remote Authentication Dial In User Service (RADIUS) Terminal Access Controller Access-Control System (TACACS) Top Secret-Sensitive Compartmented Information (TS/SCI Clearance), * Minimum of 3 years of cyber security experience with a focus on network security and hardening.

• Strong, hands-on networking fundamentals, including deep understanding of the TCP/IP stack, DNS, DHCP, VLANs, and Layer 1-7 concepts.
• Experience troubleshooting broadcast and multicast behavior in complex network environments.
• Proven ability to configure firewalls, switches, routers, and enterprise Wi-Fi solutions.
• Practical experience designing and implementing firewall policies, preferably with SonicWall NSa and TZ series.
• Experience with layered network segmentation across LAN, server, Wi-Fi, and VPN environments.
• Hands-on experience with enterprise Wi-Fi security, including RADIUS authentication and TACACS+.
• Ability to integrate network and identity solutions with Active Directory for centralized authentication and access control.
• Experience optimizing remote access solutions using technologies such as OpenVPN and SonicWall SMA.
• Knowledge of network architecture design, including Core, Distribution, and Access layers, routing, VLAN trunking, and VPN trunking.
• Experience with monitoring and security operations tools such as Lansweeper and Darktrace.
• Familiarity with endpoint security tooling, for example CrowdStrike or similar platforms.
• Hands-on experience configuring and supporting virtualization platforms such as VMware and Proxmox.
• Experience managing and supporting SAN storage environments.
• Proficiency with backup and recovery solutions, specifically Veeam, including configuration and maintenance of backup jobs.
• Security-minded approach with a strong focus on risk reduction, best practices, and operational resilience.
• Collaborative, team-first attitude with the ability to work effectively in a small, focused engineering team.
• Strong orientation toward documentation, with the ability to write clear “how-to” guides and technical documentation.
• Eligibility to obtain a TS/SCI clearance for work involving sensitive and mission-critical systems.

Additional Skills & Qualifications

• Experience working in environments that support high-performance, mission-critical systems.
• Familiarity with SIGINT, EW, or communications-related products and systems is beneficial.
• Understanding of software-defined radio (SDR) platforms and multi-channel RF transceiver concepts is a plus.
• Appreciation for SWaP-C (Size, Weight, Power, Cost) considerations in system design and deployment.
• Ability to operate effectively in an R&D and manufacturing setting where hardware and software integration is common.
• Strong written and verbal communication skills for collaboration and documentation.
• Ability to remain steady and focused in a high-responsibility environment with demanding mission requirements.

This is a Contract to Hire position based out of Germantown, MD. Pay and Benefits

The pay range for this position is $38.00 - $62.50/hr.

Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: * Medical, dental & vision * Critical Illness, Accident, and Hospital * 401(k) Retirement Plan - Pre-tax and Roth post-tax contributions available * Life Insurance (Voluntary Life & AD&D for the employee and dependents) * Short and long-term disability * Health Spending Account (HSA) * Transportation benefits * Employee Assistance Program * Time Off/Leave (PTO, Vacation or Sick Leave) Workplace Type

Actalent is a global leader in engineering and sciences services and talent solutions. We help visionary companies advance their engineering and science initiatives through access to specialized experts who drive scale, innovation and speed to market. With a network of almost 20,000 consultants and 5,000 clients across the U.S., Canada, Asia and Europe, Actalent serves many of the Fortune 500. We are proud to be an Engineering News-Record (ENR) Top 500 Design Firm for our engineering design services and a ClearlyRated Best of Staffing® winner for both client and talent service.