> Markdown version of [/jobs/ext/3017467-cybersecurity-engineer](https://www.wearedevelopers.com/jobs/ext/3017467-cybersecurity-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Engineer - **Company:** INNOVIM, LLC - **Location:** Washington, DC, United States (Remote available) - **Experience:** Expert - **Salary:** $90,000.0 - $107,000.0 - **Contract:** Permanent contract - **Skills:** Active Directory, Amazon Web Services, User Authentication, Microsoft Azure, Cloud Computing, CompTIA Security+, Cyber Security, Information Systems, Data Centers, Multi-Factor Authentication, GNU Compiler Collection, Identity and Access Management, Internet Security, Information Systems Security Architecture Professional, Microsoft Software, Role-Based Access Control, Zero Trust Network Access, Information Technology Security Auditing, Server Administration, Service Pack, Security Information and Event Management, Systems Integration, Software Vulnerability Management, Computer Network Operations, Cloud Platform System, Software Security, Information Technology, Microsoft Sentinel, Data Management, Splunk, Vulnerability Analysis - **Published:** September 20, 2026 - **Apply:** https://www.careerbuilder.com/job-details/cybersecurity-engineer-cbo--a978bd6f-7e04-4ca8-ad31-4599e5ca4f25 ## About the Role * Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field (equivalent experience considered). * Minimum 8 years of hands-on cybersecurity engineering experience. * Demonstrated experience with SIEM (e.g., Microsoft Sentinel or Splunk), EDR/XDR (e.g., Microsoft Defender), IAM/MFA, and vulnerability management (e.g., Tenable). * Working knowledge of NIST SP 800-53, NIST SP 800-207 Zero Trust, and the NIST Risk Management Framework. * CompTIA Security+ (DoD 8140/8570 IAT/IAM) required; higher-level certification preferred. * S. citizenship or permanent residence status; ability to obtain a Public Trust (Tier 2) determination., * CISSP, CySA+, GIAC (e.g., GCIH, GCIA), or CEH. * Microsoft (SC-200/AZ-500) or AWS security certifications. * Hands-on experience with Microsoft Sentinel, Microsoft Defender, and Tenable.sc. * Experience securing hybrid Active Directory / Entra ID and M365 GCC environments. * Prior experience supporting federal or Congressional / legislative branch environments. Clearance, Suitability & Security U.S. citizenship or permanent residence status is required. The selected candidate must be able to obtain and maintain a Public Trust (Tier 2) suitability determination and will undergo an FBI criminal background check and U.S. Capitol Police fingerprinting prior to starting work, in accordance with the contract's security requirements. Remote work is authorized; however, on-site presence at the customer's facilities in Washington, DC (and, as needed, data-center/computing facilities in Ashburn, VA and Manassas, VA) may be required based on task assignment. Local travel to these sites is non-reimbursable. Core hours are 9:00 AM-6:00 PM ET, Monday-Friday; occasional after-hours or weekend maintenance activity may be required., Access Control, Amazon Web Services (AWS), Analysis Skills, Applications Security, Authentication, Background Investigation, CISSP - Certified Information Systems Security Professional, Change Control, Cloud Applications, Cloud Computing, CompTIA Security+, Computer Science, Computer Security, DoD Directive 8140, DoD Directive 8570, Documentation, Engineering, Enterprise Protection, Federal Bureau of Investigation (FBI), GCIA - GIAC Certified Intrusion Analyst, GCIH - GIAC Certified Incident Handler, GIAC - Global Information Assurance Certification, GNU C Compiler, IAM - Information Assurance Management, IAT - Information Assurance Technical, IR (Infrared), Identity Data Management, Incident Management, Information Technology & Information Systems, Internet Security, Microsoft Active Directory, Microsoft Product Family, Microsoft Windows Azure, Network Operations Center, Risk Analysis, Risk Management Framework (RMF), Security Attacks, Security Auditing, Security Information and Event Management (SIEM), Security Monitoring, Software Administration, Software Patches, Splunk, Standard Operating Procedures (SOP), System Integration (SI), Technical/Engineering Design, U.S. National Institute of Standards and Technology (NIST), United States Citizen, Vulnerability Scanners, Willing to Travel, Work From Home ## Description The Cybersecurity Engineer designs, implements, and maintains enterprise security controls that enforce Zero Trust principles - identity-centric access, least-privilege enforcement, continuous monitoring, and threat detection - across cloud, network, and endpoint environments for a U.S. legislative branch agency. The role strengthens the organization's overall security posture and improves detection and response capabilities in alignment with NIST SP 800-53 and NIST SP 800-207., * Implement and maintain enterprise security controls aligned with NIST SP 800-53 (AC, CM, SC, AU, IR, SI control families). * Enforce Zero Trust Architecture per NIST SP 800-207, including continuous verification, identity-centric security, and least-privilege access across cloud, network, and endpoint environments. * Configure and manage Identity and Access Management (IAM): authentication, authorization, role-based access control (RBAC), privileged access management (PAM), and multi-factor authentication (MFA). * Monitor, analyze, and respond to security events using enterprise tools (SIEM, EDR/XDR); support incident triage, containment, investigation, and remediation. * Maintain continuous monitoring capabilities - centralized log collection, correlation, and analysis with compliant log retention. * Conduct vulnerability scanning, assessment, and remediation across systems and applications; coordinate patching and mitigation. * Support cloud and application security (e.g., AWS, Azure): secure configuration, identity controls, and workload security. * Harden systems, applications, and cloud environments to secure configuration baselines; implement segmentation to limit lateral movement. * Perform risk analysis aligned with the NIST Risk Management Framework (RMF); conduct RCA for security incidents and control failures. * Develop and maintain cybersecurity SOPs, security baselines, and audit-ready documentation; support 24/7 security monitoring operations. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [IKEA Story: Transforming an Iconic Retail Brand](https://www.wearedevelopers.com/videos/444-ikea-story-transforming-an-iconic-retail-brand) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [The Sustainability Race: AI's Promises, Pitfalls and Potential](https://www.wearedevelopers.com/videos/100155-the-sustainability-race-ai-s-promises-pitfalls-and-potential) - [What's (new) with Spring Boot and Containers?](https://www.wearedevelopers.com/videos/1514-what-s-new-with-spring-boot-and-containers) - [Building the Nervous System of AI - Michael Kagan (NVIDIA)](https://www.wearedevelopers.com/videos/2133-building-the-nervous-system-of-ai-michael-kagan-nvidia) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)