Cyber Engineer

Socket.dev; Bethesda (MD); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health, dental, vision benefits

401(k) plan with employer match

Paid time off

Professional development support

Job summary

Avyanna LLC seeks a Cyber Engineer to support the implementation, operation, and continuous improvement of cybersecurity capabilities for a federal IT program. The role covers vulnerability management, security monitoring, incident response support, and compliance activities within a FISMA-regulated environment following NIST frameworks.

The candidate will perform vulnerability scans, monitor SIEM alerts, assist with ATO packages, and ensure adherence to NIST SP 800-53 controls.

Qualifications

• Bachelor's degree in Cybersecurity, IT, or related field.
• 4+ years of cybersecurity engineering experience in federal or regulated IT.
• Hands-on with vulnerability scanning tools and SIEM platforms.
• Experience contributing to ATO packages and security assessments.
• DoD 8570.01-M compliant Security+ certification.

Responsibilities

• Operate vulnerability scanning tools (Tenable.sc/Nessus/Qualys) and track remediation.
• Monitor security events using SIEM platforms and investigate incidents per IR plan.
• Support ATO, SSPs, SARs, and POA&M management activities.
• Assess compliance with NIST SP 800-53 and perform continuous monitoring.
• Review security configurations against DISA STIGs and CIS Benchmarks.
• Assist with tool implementation and tuning (EDR, IDS/IPS, DLP, MFA).
• Contribute to threat intelligence and incident response tabletop exercises.

Skills

Vulnerability management

SIEM monitoring

Incident response

NIST RMF/NIST SP 800-53

ATO support

Security+ certification

Education

Bachelor's degree in Cybersecurity/IT or related field

Tools

Tenable.sc

Nessus

Qualys

Splunk

Microsoft Sentinel

BigFix

Axonius

Job description

POSITION SUMMARY

We are seeking a Cyber Engineer to support the implementation, operation, and continuous improvement of cybersecurity capabilities for a federal IT program. This role performs vulnerability management, security monitoring, incident response support, and compliance activities within a FISMA-regulated environment following NIST frameworks.

KEY RESPONSIBILITIES

• Operate and manage vulnerability scanning tools (Tenable.sc / Nessus, Qualys) — conduct scans, analyze results, prioritize findings, and track remediation through closure
• Monitor security events and alerts using SIEM platforms (Splunk, Microsoft Sentinel); investigate anomalies and escape confirmed incidents per the IR plan
• Support the ATO process: contribute to System Security Plans (SSPs), Security Assessment Reports (SARs), and POA&M management
• Assess and document compliance with NIST SP 800-53 security controls; assist with continuous monitoring activities and ConMon reporting
• Perform security configuration reviews against DISA STIGs and CIS Benchmarks; document findings and work with system owners on remediation
• Support implementation and tuning of security tools: IDS/IPS, DLP, endpoint detection and response (EDR), and multi-factor authentication solutions
• Contribute to threat intelligence analysis and security awareness activities; assist with tabletop exercises and incident response drills

REQUIRED QUALIFICATIONS

• Bachelor's degree in Cybersecurity, Information Technology, or related field
• 4+ years of cybersecurity engineering experience in a federal or regulated IT environment
• Hands-on experience with vulnerability scanning tools (Tenable.sc or Qualys) and SIEM platforms (Splunk preferred)
• Working knowledge of NIST SP 800-53, NIST SP 800-37 (RMF), and FISMA compliance requirements
• Experience contributing to ATO packages and supporting security assessments
• CompTIA Security+ certification (DoD 8570.01-M compliant)

Clearance: Must be eligible to obtain and maintain a federal Public Trust background investigation (MBI or HBI). U.S. citizenship or permanent residency required.

PREFERRED QUALIFICATIONS

• CEH, CASP+, or CISSP certification
• Experience with CDM tools: BigFix, Axonius, or Tenable.sc in a federal dashboard environment
• Familiarity with Zero Trust architecture principles and NIST SP 800-207
• Experience supporting security operations at NIH, HHS, or similar federal research agencies

BENEFITS

Avyanna LLC offers a competitive salary and comprehensive benefits package including health, dental, vision, 401(k), paid time off, and professional development support.

Avyanna LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or veteran status.