812107 Cyber Security Engineer $215,000.00

B4Corp; Bethesda (MD); On-site; USD 194,000 - 237,000; Full time

Benefits offered by this job

401k with employer match

Phantom stock

Medical insurance

Dental/Vision

Paid time off

Employee referral bonus

Job summary

B4Corp in Bethesda, MD is seeking a Cyber Infrastructure Support SME with TS/SCI clearance to protect government and contractor networks. This role covers design, implementation, and ongoing maintenance of security controls across DevSecOps lifecycles.

The position requires 16+ years of related experience (or 14+ with MS), extensive exposure to SIEMs, firewalls, and endpoint protection; a salary up to $215,000 per year with full benefits and a strong compensation package.

Qualifications

• Experience implementing and managing SIEMs (Splunk) and defensive security tools.
• Experience supporting RMF/ATO processes and vulnerability remediation.
• Strong collaboration with ISSEs/ISSMs/ISSOs and DevSecOps teams.

Responsibilities

• Plan, implement, monitor, and upgrade security controls for enterprise systems.
• Design, configure, troubleshoot, and maintain security technologies (firewalls, endpoint protection).
• Assist with incident response, investigation, and remediation efforts.
• Audit systems for compliance with cybersecurity standards and baselines.
• Collaborate with engineering and operations to integrate security into DevSecOps pipelines.

Skills

SIEM experience

Incident response

RMF/ATO process

Security engineering

Threat monitoring

Education

BS degree + 16+ years or MS +14 years

Tools

Splunk

HBSS/Trellix

Firewalls

IDS/IPS

Job description

Labor Category: Cyber Security Engineer
Position Title: Cyber Infrastructure Support
Position Level: Level 1 – Subject Matter Expert
Salary: Up to $215,000.00 per year
Core Hours: 9am to 4pm
Location: Bethesda MD

Description

Position Requires a Top Secret (TS/SCI) Clearance with a Polygraph.
The Cybersecurity Engineer SME is responsible for protecting the customer’s information systems, networks, and infrastructure from cyber threats and vulnerabilities. This role supports the design, implementation, and maintenance of security controls that safeguard mission systems and ensure compliance with applicable cybersecurity policies, standards, and regulatory frameworks.
The Cybersecurity Engineer SME will work closely with Information Systems Security Engineers (ISSEs), Information Systems Security Managers (ISSMs), software developers, systems engineers, and government stakeholders throughout the DevSecOps lifecycle. The candidate will perform a full spectrum of cybersecurity engineering activities, including implementing security technologies, supporting incident response efforts, and ensuring systems meet required security and compliance standards.

Details

Labor Category: Cyber Security Engineer
Position Title: Cyber Infrastructure Support
Position Level: Level 1 – Subject Matter Expert
Salary: Up to $215,000.00 per year
Core Hours: 9am to 4pm
Location: Bethesda MD

Mandatory Requirements

• Developmental (0-2 years’ experience)
• Full Performance (3-5 years’ experience)
• Senior (6-10 years’ experience)
• Expert (11-15 years’ experience)
• SME (16+ years’ experience)

Plan, implement, manage, monitor, and upgrade security controls and tools used to protect enterprise systems and networks, while identifying opportunities to automate repeatable operations tasks.

• Design, configure, implement, troubleshoot, and maintain security technologies such as firewalls (security groups), endpoint protection tools (HBSS/Trellix), SIEM platforms (Splunk). Monitor system and network security using Security Information and Event Management (SIEM) tools such as Splunk Enterprise Security to detect, analyze, and respond to potential threats or anomalous activity.
• Support the investigation and remediation of cybersecurity incidents, including system or network breaches and malware infections. Participate in change management processes to ensure system changes maintain security compliance and do not introduce new vulnerabilities.
• Audit systems and configurations to ensure compliance with established cybersecurity policies, standards, and secure configuration baselines.
• Collaborate with engineering, development, and operations teams to integrate security controls into DevSecOps pipelines and system architectures.
• Continuously monitor security advisories, bulletins, and industry threat intelligence to stay informed of current vulnerabilities, threats, and trends. Assist with the implementation and enforcement of secure system configurations and cybersecurity compliance requirements.
• Support vulnerability management activities by reviewing scan results, assessing risk, and coordinating remediation efforts with system owners and technical teams.

Basic Qualifications

• Experience implementing and managing Security Information and Event Management (SIEM) tools such as Splunk or similar platforms. Experience working with endpoint and network security technologies, including IDS/IPS, HBSS/Trellix, and related defensive security tools.
• Experience reviewing and analyzing cybersecurity event logs to identify indicators of compromise or suspicious activity. Experience supporting incident response plans, vulnerability management programs, risk management plans, and Plans of Action and Milestones (POA&Ms).
• Experience conducting or supporting technical cybersecurity assessments and security audits. Experience identifying system vulnerabilities and instances of non-compliance with cybersecurity standards and regulatory requirements. Experience collaborating with DevSecOps teams to review vulnerability scan results and support remediation of findings.
• Experience supporting the Risk Management Framework (RMF) authorization process by reviewing security documentation and providing risk-based recommendations to stakeholders regarding system risk posture as part of Authority to Operate (ATO) activities. Manage and track Plans of Action and Milestones (POA&Ms) for customer-sponsored systems, coordinating with key stakeholders including ISSOs, ISSEs, ISSMs, and Security Control Assessors (SCAs)
• Experience applying system security engineering principles in areas such as system security design, lifecycle engineering, authentication and authorization mechanisms, cryptography, intrusion detection, contingency planning, incident handling, auditing, configuration management, and change control.
• Professional cybersecurity certifications such as Security+, CISSP, CySA+, CEH, or GCIH.
• Education/Experience: Requires BS degree and 16 or more years of prior relevant experience, or MS degree and 14 or more years of prior relevant experience.

Optional Requirements

Experience with cybersecurity tools such as Rapid7, Tenable/Nessus, HBSS/Trellix, SonarQube, or endpoint detection and response (EDR) platforms, as well as using STIG viewers and compliance tools to assess systems against established security configuration baselines.

• Experience implementing and managing network and application firewalls, incident detection platforms, and digital forensic tools.
• Experience with automation tools such as Ansible or CloudFormation to support infrastructure and security automation. Experience with Agile software development environments and scripting/programming languages such as Python or PowerShell. (e.g., React).
• Familiarity with cloud computing environments, including AWS, Oracle Cloud, or Google Cloud Platform (GCP).
• Experience with system monitoring and health tools such as SolarWinds.
• Experience working with DevSecOps pipelines and CI/CD security tools.
• Experience administering or securing systems in Linux environments (Red Hat).

B4CORP Company Information

B4Corp is a small defense contracting company that focuses on providing an optimum environment for mission-focused, highly skilled consultants to support the United States of America’s intelligence community and other defense organizations. B4Corp provides a low overhead, highly efficient, high salary environment that allows employees to excel at meeting the client’s needs. B4Corp is looking for information technology professionals that have a high sense of personal responsibility, self-motivation, and mission drive.
B4Corp’s dedication and care for its employees is reflected in our outstanding compensation and benefits package. B4Corp’s benefits reflect the company’s policy of putting the employees first. B4Corp’s maximum flexibility comp / makeup time policy, along with the company’s cafeteria-style benefit plan that allows employees to maximize their Benefit Dollars, reflects B4Corp’s commitment to its employees.

Compensation

• Outstanding Salaries

Retirement

• Full Vanguard 401k Plan – Featuring a full scope of investment options – 100% employer matched contribution up to 6% of employee’s salary – Ability to max out 401k savings $57k ($63.5k if over 50)
• Employees receive B4Corp phantom stock each year (2-year vesting period)

Insurance

• Medical – United Health Care (UHC) (multiple plan options)
• Dental – United Concordia (UC) Flex Plan
• Vision – Vision Service Plan Insurance Co (VSP) Signature Plans
• Mutual of Omaha short-term disability (60% of salary up to $2,000.00/week)
• Mutual of Omaha long-term disability (60% of salary up to $10,000.00/month)
• Mutual of Omaha life insurance ($200,000.00)

Employee Referral Bonus

• Refer a friend or a coworker and receive $3,000 per year for every year the person works for B4CORP

Paid Time Off (PTO)

• Seven weeks of leave per year (including ten federal holidays)
• Flexible work schedule with comp time (with customer approval)

B4Corp is an EEO and e-Verify employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation or national origin. Please take the time to review and complete these three voluntary identification forms if you choose to do so and email them to [e-mail].