> Markdown version of [/jobs/ext/3883902-cybersecurity-engineer](https://www.wearedevelopers.com/jobs/ext/3883902-cybersecurity-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Engineer - **Company:** Synergy Business Innovation & Solutions - **Location:** United States (Remote available) - **Experience:** Experienced - **Salary:** $116,400.0 - $125,000.0 - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Microsoft Access, Java (Programming Language), Microsoft Windows, Active Directory, Application Programming Interfaces (APIs), Amazon Web Services, Component-Based Software Engineering, Systems Engineering, Microsoft Azure, Burp Suite, Cloud Computing Security, CompTIA Security+, Cyber Security, Information Systems, Databases, System Configuration, Linux, DevOps, Multi-Factor Authentication, Identity and Access Management, Information Systems Security Architecture Professional, Key Management, Lightweight Directory Access Protocols (LDAP), Microsoft Security Essentials, OpenShift, Role-Based Access Control, Fortify (Software), Zero Trust Network Access, Security Information and Event Management, Single Sign-On, SonarQube, Data Streaming, Systems Architecture, Systems Integration, Software Vulnerability Management, Web Services, SSL Certificate Management, Data Logging, Enterprise Software Applications, DevOps Tools - Open-source, Sonatype, Software Security, Appian, Veracode, HybridCloud, Kubernetes, Information Technology, Low-code, Checkmarx, Splunk, Devsecops, Qualys, Docker, Security Orchestration, Automation & Response, Plan of Action and Milestones, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing - **Published:** October 23, 2026 - **Apply:** https://startup.jobs/cybersecurity-engineer-remote-positions-available-10560350 ## About the Role * Bachelor's degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, Engineering, or a related field; additional relevant experience may be substituted for a degree. * Five (5) or more years of experience in cybersecurity engineering, information assurance, security operations, systems engineering, application security, or a related technical discipline. * Three (3) or more years of direct experience supporting federal cybersecurity compliance, RMF, A&A, continuous monitoring, or equivalent security-governance activities. * Demonstrated knowledge of NIST RMF and NIST SP 800-53 security-control principles. * Experience with vulnerability management, including vulnerability scanning, security finding analysis, remediation coordination, risk prioritization, and POA&M tracking. * Experience with secure configuration and system-hardening practices for Linux/Unix, Windows, applications, databases, or networked enterprise systems. * Experience supporting security compliance with STIGs, SRGs, or equivalent secure configuration standards. * Familiarity with identity and access management concepts, including Active Directory, LDAP, role-based access control, privileged access, multifactor authentication, and single sign-on. * Experience reviewing or supporting application-security testing, such as SAST, DAST, SCA, secrets scanning, API security testing, or container security. * Experience with security information and event management (SIEM), logging, monitoring, or vulnerability-management tools. * Ability to create and maintain high-quality cybersecurity documentation, technical reports, risk analyses, system-security artifacts, and remediation plans. * Strong analytical, written communication, and stakeholder-engagement skills. * Ability to satisfy applicable government background investigation, suitability, and security requirements. * Relevant professional certifications, such as: CompTIA Security+. Preferred Qualifications: * Experience supporting cybersecurity engineering in a federal, public-sector, homeland security, or similarly regulated environment. * Experience supporting enterprise workflow, case-management, or low-code platforms, including Appian or comparable platforms. * Experience securing Java-based enterprise applications, APIs, web services, and integration services. * Familiarity with on-premises and hybrid-cloud environments, including Amazon Web Services (AWS), Microsoft Azure, OpenShift, Kubernetes, Docker, or similar technologies. * Experience with security automation and DevSecOps tools, including SonarQube, Snyk, Fortify, Checkmarx, Veracode, OWASP ZAP, Burp Suite, Tenable, Qualys, Rapid7, Splunk, Elastic, or comparable tools. * Knowledge of Zero Trust Architecture, cloud-security principles, API security, secure software supply-chain practices, and software bill of materials (SBOM) management. * Experience preparing and maintaining federal security artifacts within governance, risk, and compliance (GRC) platforms. * Experience with security-control assessments, independent verification and validation, audit support, or Inspector General review support. * Relevant professional certifications, such as: * CompTIA Security+; * Certified Information Systems Security Professional (CISSP); * Certified Information Security Manager (CISM); * Certified Authorization Professional (CAP); * Certified Information Systems Auditor (CISA); * GIAC Security Essentials (GSEC), GIAC Penetration Tester (GPEN), or similar GIAC certification; * Certified Ethical Hacker (CEH); * AWS Certified Security - Specialty; * Microsoft Certified: Azure Security Engineer Associate. * Active security clearance or demonstrated eligibility to obtain and maintain the required clearance or suitability determination. Education Requirements: * Required: Bachelor's degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, Engineering, or a related field; additional relevant experience may be substituted for a degree. Citizenship & Clearance Requirements: * Required: Secret ## Description Synergy Business Innovation & Solutions, Inc. is seeking a skilled Cybersecurity Engineer to protect and sustain a mission-critical enterprise application environment. The Cybersecurity Engineer will support the design, implementation, assessment, monitoring, and continuous improvement of cybersecurity controls for applications, infrastructure, integrations, and supporting DevSecOps processes. The successful candidate will work collaboratively with system administrators, DevOps engineers, software developers, database administrators, program leadership, and customer security stakeholders to ensure systems are designed, deployed, operated, and maintained in accordance with applicable federal cybersecurity requirements. This position requires practical experience with security engineering, vulnerability management, secure configuration, risk management, application security, continuous monitoring, and assessment and authorization activities. The ideal candidate can translate cybersecurity requirements into technically practical controls, identify and remediate security risks, prepare high-quality compliance documentation, and help delivery teams maintain a secure and resilient operational environment., * Design, implement, validate, and maintain cybersecurity controls for enterprise applications, infrastructure, databases, integrations, and supporting platform services. * Translate customer, regulatory, and organizational cybersecurity requirements into actionable technical requirements, system configurations, security procedures, and implementation plans. * Support implementation of security controls aligned with the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF), NIST Special Publication (SP) 800-53, and other applicable federal security standards. * Assess system architecture, data flows, interfaces, and application components to identify security risks, control gaps, and opportunities for security enhancement. * Participate in secure architecture reviews, design reviews, code-review activities, change-control boards, and production-readiness reviews. * Support implementation and management of identity, credential, and access-management controls, including least privilege, role-based access control, multifactor authentication, privileged access, and account lifecycle management. * Evaluate and help implement encryption, certificate management, secure communications, secrets management, and data-protection capabilities.