> Markdown version of [/jobs/ext/3114972-mid-level-cybersecurity-engineer](https://www.wearedevelopers.com/jobs/ext/3114972-mid-level-cybersecurity-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Mid-Level Cybersecurity Engineer

- **Company:** Drawbridge Partners, LLC
- **Location:** Tysons, VA, United States
- **Experience:** Experienced
- **Salary:** $150,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Active Directory, Cyber Security, Information Leak Prevention, Linux, Windows PowerShell, Broadcom, ArcSight SIEM Tool, Security Information and Event Management, Symantec, Scripting, Splunk
- **Published:** September 27, 2026
- **Apply:** https://www.wayup.com/i-j-Mid-Level-Cybersecurity-Engineer-Drawbridge-750561598518277/

## About the Role

+ Active TS/SCI with CI Polygraph (must be current at time of hire)
 + 4-7 years of IT or cybersecurity experience
 + At least 2 years of hands-on Carbon Black administration (EDR/Response, App Control/Protection/Bit9, or Device Control)
 + Experience designing and enforcing DLP and device control policies in an enterprise environment
 + Working knowledge of Windows and Linux endpoints, Active Directory and Group Policy
 + Familiarity with NIST 800-53, RMF and DoD/IC security requirements
 + DoD 8140/8570 IAT Level II certification (such as Security+ CE), or the ability to obtain it within 6 months of hire
 + Bachelor's degree in IT, Cybersecurity or a related field, or equivalent experience
Nice to Have

 + Experience with other DLP platforms such as Forcepoint, Symantec/Broadcom DLP, Microsoft Purview or Trellix
 + SIEM experience (Splunk, Elastic or ArcSight), including building correlation searches for endpoint and DLP events
 + PowerShell or Python scripting for automation
 + Certifications such as CySA+, CASP+, GCIH or CISSP
 + Experience supporting Intelligence Community or insider threat programs

## Description

Drawbridge Recruiting is partnering with a leading national security contractor to hire a Mid-Level Cybersecurity Engineer for a mission-critical government program. You'll own the Carbon Black endpoint security platform and the data loss prevention (DLP) controls that keep sensitive and classified information where it belongs.
This is a hands-on engineering role. You'll deploy, configure and tune the tools, write the policies, investigate what gets flagged, and work alongside the SOC, Insider Threat and Incident Response teams. You'll split your time between a hybrid schedule and a secure facility in Gaithersburg or Tysons Corner.
What You'll Do

 + Administer, configure and tune Carbon Black (EDR, App Control and Device Control) across enterprise Windows and Linux endpoints
 + Build and enforce DLP policies that stop unauthorized transfer of sensitive or classified data through removable media, applications and network channels
 + Create and maintain application allow-listing and device control rules that protect the environment without slowing the mission
 + Monitor, triage and investigate endpoint alerts and data exfiltration events, and escalate incidents when needed
 + Partner with SOC, Insider Threat and Incident Response teams on investigations and remediation
 + Handle Carbon Black upgrades, patching, sensor deployment and platform health monitoring
 + Support RMF/ATO activities, including security control documentation, POA&Ms and audit evidence
 + Produce reports and metrics on endpoint posture, policy violations and data protection trends
 + Maintain SOPs, configuration baselines and technical documentation


## Related Videos

- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Discover the open source trio you didn’t expect: .NET and PostgreSQL on Linux](https://www.wearedevelopers.com/videos/2042-discover-the-open-source-trio-you-didn-t-expect-net-and-postgresql-on-linux)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)