Protecting and sustaining a mission-critical enterprise application environment is the core of this cybersecurity engineering role. The engineer will support the design, implementation, assessment, monitoring, and continuous improvement of cybersecurity controls for applications, infrastructure, integrations, and supporting DevSecOps processes. This position is designated as work-from-home and suits a candidate with practical experience in security engineering, vulnerability management, secure configuration, risk management, application security, continuous monitoring, and assessment and authorization activities.
Responsibilities
Design, implement, validate, and maintain cybersecurity controls for enterprise applications, infrastructure, databases, integrations, and supporting platform services
Translate customer, regulatory, and organizational cybersecurity requirements into actionable technical requirements, system configurations, security procedures, and implementation plans
Support implementation of security controls aligned with the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF), NIST Special Publication (SP) 800-53, and other applicable federal security standards
Assess system architecture, data flows, interfaces, and application components to identify security risks, control gaps, and opportunities for security enhancement
Participate in secure architecture reviews, design reviews, code-review activities, change-control boards, and production-readiness reviews
Support implementation and management of identity, credential, and access-management controls, including least privilege, role-based access control, multifactor authentication, privileged access, and account lifecycle management
Evaluate and help implement encryption, certificate management, secure communications, secrets management, and data-protection capabilities
Requirements
Bachelor’s degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, Engineering, or a related field; additional relevant experience may be substituted for a degree
Five (5) or more years of experience in cybersecurity engineering, information assurance, security operations, systems engineering, application security, or a related technical discipline
Three (3) or more years of direct experience supporting federal cybersecurity compliance, RMF, A&A, continuous monitoring, or equivalent security-governance activities
Demonstrated knowledge of NIST RMF and NIST SP 800-53 security-control principles
Experience with vulnerability management, including vulnerability scanning, security finding analysis, remediation coordination, risk prioritization, and POA&M tracking
Experience with secure configuration and system-hardening practices for Linux/Unix, Windows, applications, databases, or networked enterprise systems
Millions of jobs, with real people getting hired every day
200,000+
New jobs added daily
7,000,000+
Verified job listings
1,000,000+
Tailored applications submitted
Experience supporting security compliance with STIGs, SRGs, or equivalent secure configuration standards
Familiarity with identity and access management concepts, including Active Directory, LDAP, role-based access control, privileged access, multifactor authentication, and single sign-on
Experience reviewing or supporting application-security testing, such as SAST, DAST, SCA, secrets scanning, API security testing, or container security
Experience with security information and event management (SIEM), logging, monitoring, or vulnerability-management tools
Ability to create and maintain high-quality cybersecurity documentation, technical reports, risk analyses, system-security artifacts, and remediation plans
Strong analytical, written communication, and stakeholder-engagement skills
Ability to satisfy applicable government background investigation, suitability, and security requirements
Relevant professional certifications, such as: CompTIA Security+
Citizenship & Clearance: Secret
Nice to have:
Experience supporting cybersecurity engineering in a federal, public-sector, homeland security, or similarly regulated environment
Experience supporting enterprise workflow, case-management, or low-code platforms, including Appian or comparable platforms
Experience securing Java-based enterprise applications, APIs, web services, and integration services
Familiarity with on-premises and hybrid-cloud environments, including Amazon Web Services (AWS), Microsoft Azure, OpenShift, Kubernetes, Docker, or similar technologies
Experience with security automation and DevSecOps tools, including SonarQube, Snyk, Fortify, Checkmarx, Veracode, OWASP ZAP, Burp Suite, Tenable, Qualys, Rapid7, Splunk, Elastic, or comparable tools
Knowledge of Zero Trust Architecture, cloud-security principles, API security, secure software supply-chain practices, and software bill of materials (SBOM) management
Experience preparing and maintaining federal security artifacts within governance, risk, and compliance (GRC) platforms
Experience with security-control assessments, independent verification and validation, audit support, or Inspector General review support
Relevant professional certifications, such as: CompTIA Security+, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Authorization Professional (CAP), Certified Information Systems Auditor (CISA), GIAC Security Essentials (GSEC), GIAC Penetration Tester (GPEN), or similar GIAC certification, Certified Ethical Hacker (CEH), AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate
Active security clearance or demonstrated eligibility to obtain and maintain the required clearance or suitability determination
Benefits
Group medical, dental, and vision insurance
Company paid life, short-term, and long-term disability insurance
HSA, FSA
401(k) with company match
PTO & Bonus Leave
11 paid federal holidays
Parental leave
Tuition and training reimbursement
Referral bonus program
Well-being programs
Career mentors available for every employee
Company-funded certification opportunities
Education reimbursement
Important Details
Work format: work-from-home
Application Process
The use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly granted
You are expected to be on camera during interviews and assessments
We reserve the right to take your picture to verify your identity and prevent fraud
About the Company
Synergy Business Innovation & Solutions is a premier implementer of cutting-edge software solutions. Synergy brings the experience and expertise necessary to deliver capability that provides tangible ROI to our customers. Our core areas of expertise are in the fields of Digital Transformation, Cloud Solutions, SaaS and Low-Code/No-Code Solutions, Emerging Technologies, Data Analytics and Visualization, Information Assurance, and Business Process Re-Engineering.
Synergy is a premier Information Technology (IT) firm focused on federal digital transformation with cloud, low/no code SaaS platform solutions, and 100%, 100-day agile MVP solution delivery.
