Cybersecurity Engineer

Synergy; Reston (VA); Remote; USD 116,000 - 125,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) with company match

PTO & Bonus Leave

11 paid federal holidays

Parental leave

Tuition and training reimbursement

Referral bonus

Well-being programs

Job summary

Synergy is seeking a Cybersecurity Engineer to guard and sustain a mission-critical enterprise app environment. You will design, implement, and monitor security controls across applications, infrastructure, and integrations, aligning with DevSecOps practices.

You will work with sysadmins, DevOps, developers, DBAs, and security stakeholders to ensure systems meet federal requirements. Strong RMF, SP 800-53, and vulnerability mgmt experience are essential.

Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, IT, Engineering, or related field.
• 5+ years of cybersecurity engineering or related technical discipline.
• 3+ years supporting federal cybersecurity compliance and RMF/AA processes.
• Knowledge of NIST RMF and NIST SP 800-53 security-control principles.
• Experience with vulnerability management and risk remediation.
• Experience with secure configuration and hardening practices across platforms.
• Familiarity with IAM concepts (AD, LDAP, RBAC, MFA).
• Experience with application-security testing (SAST/DAST) and SAFe security practices.
• Experience with SIEM, logging, monitoring, or vulnerability management tools.
• Strong technical writing and stakeholder engagement skills.
• Ability to obtain and maintain government suitability/clearance.
• Relevant certifications (e.g., CompTIA Security+).

Responsibilities

• Design, implement, validate, and maintain cybersecurity controls for enterprise apps and infra.
• Translate requirements into technical configurations, procedures, and plans.
• Support RMF, SP 800-53, and other federal security standards.
• Assess architecture, data flows, and interfaces for security gaps.
• Participate in secure architecture reviews, code reviews, and change control.
• Manage IAM controls including least privilege and MFA.
• Evaluate encryption, certificate mgmt, and data protection capabilities.

Skills

Bachelor level degree info-sec

5+ years experience

RMF experience

Vulnerability mgmt

IAM concepts

SIEM knowledge

Documentation

Strong written comms

Security clearable

SAST/DAST

Education

Bachelor's degree in Cybersecurity/Info Assurance/IT

Tools

Snyk

Fortify

OWASP ZAP

Burp Suite

SAST/DAST tools

Job description

Description

Synergy Business Innovation & Solutions is a premier implementer of cutting-edge software solutions. Synergy brings the experience and expertise necessary to deliver capability that provides tangible ROI to our customers. Our core areas of expertise are in the fields of Digital Transformation, Cloud Solutions, SaaS and Low-Code/No-Code Solutions, Emerging Technologies, Data Analytics and Visualization, Information Assurance, and Business Process Re-Engineering.

Synergy offers its employees a generous portfolio of core and voluntary benefits including: group medical, dental, and vision insurance, company paid life, short-term, and long-term disability insurance, HSA, FSA, 401(k) with company match, PTO & Bonus Leave, 11 paid federal holidays, parental leave, tuition and training reimbursement, a referral bonus program, and well-being programs.

At Synergy, you'll be challenged and given the opportunity to grow in your career path. In fact, growth is such a big deal to us that we have career mentors available for every employee, company-funded certification opportunities, education reimbursement, and a general open-door policy so that you have support when you need it. Our team is eager to learn, fast-paced, and quality-driven. If that sounds like you, Synergy has a position for you!

This position is designated as work-from-home.

About the Role

Synergy Business Innovation & Solutions, Inc. is seeking a skilled Cybersecurity Engineer to protect and sustain a mission-critical enterprise application environment. The Cybersecurity Engineer will support the design, implementation, assessment, monitoring, and continuous improvement of cybersecurity controls for applications, infrastructure, integrations, and supporting DevSecOps processes.

The successful candidate will work collaboratively with system administrators, DevOps engineers, software developers, database administrators, program leadership, and customer security stakeholders to ensure systems are designed, deployed, operated, and maintained in accordance with applicable federal cybersecurity requirements. This position requires practical experience with security engineering, vulnerability management, secure configuration, risk management, application security, continuous monitoring, and assessment and authorization activities.

The ideal candidate can translate cybersecurity requirements into technically practical controls, identify and remediate security risks, prepare high-quality compliance documentation, and help delivery teams maintain a secure and resilient operational environment.

Primary Responsibilities

• Design, implement, validate, and maintain cybersecurity controls for enterprise applications, infrastructure, databases, integrations, and supporting platform services.
• Translate customer, regulatory, and organizational cybersecurity requirements into actionable technical requirements, system configurations, security procedures, and implementation plans.
• Support implementation of security controls aligned with the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF), NIST Special Publication (SP) 800-53, and other applicable federal security standards.
• Assess system architecture, data flows, interfaces, and application components to identify security risks, control gaps, and opportunities for security enhancement.
• Participate in secure architecture reviews, design reviews, code-review activities, change-control boards, and production-readiness reviews.
• Support implementation and management of identity, credential, and access-management controls, including least privilege, role-based access control, multifactor authentication, privileged access, and account lifecycle management.
• Evaluate and help implement encryption, certificate management, secure communications, secrets management, and data-protection capabilities.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, Engineering, or a related field; additional relevant experience may be substituted for a degree.
• Five (5) or more years of experience in cybersecurity engineering, information assurance, security operations, systems engineering, application security, or a related technical discipline.
• Three (3) or more years of direct experience supporting federal cybersecurity compliance, RMF, A&A, continuous monitoring, or equivalent security-governance activities.
• Demonstrated knowledge of NIST RMF and NIST SP 800-53 security-control principles.
• Experience with vulnerability management, including vulnerability scanning, security finding analysis, remediation coordination, risk prioritization, and POA&M tracking.
• Experience with secure configuration and system-hardening practices for Linux/Unix, Windows, applications, databases, or networked enterprise systems.
• Experience supporting security compliance with STIGs, SRGs, or equivalent secure configuration standards.
• Familiarity with identity and access management concepts, including Active Directory, LDAP, role-based access control, privileged access, multifactor authentication, and single sign‑on.
• Experience reviewing or supporting application-security testing, such as SAST, DAST, SCA, secrets scanning, API security testing, or container security.
• Experience with security information and event management (SIEM), logging, monitoring, or vulnerability-management tools.
• Ability to create and maintain high-quality cybersecurity documentation, technical reports, risk analyses, system‑security artifacts, and remediation plans.
• Strong analytical, written communication, and stakeholder‑engagement skills.
• Ability to satisfy applicable government background investigation, suitability, and security requirements.
• Relevant professional certifications, such as: CompTIA Security+.

Preferred Qualifications

• Experience supporting cybersecurity engineering in a federal, public‑sector, homeland security, or similarly regulated environment.
• Experience supporting enterprise workflow, case‑management, or low‑code platforms, including Appian or comparable platforms.
• Experience securing Java‑based enterprise applications, APIs, web services, and integration services.
• Familiarity with on‑premises and hybrid‑cloud environments, including Amazon Web Services (AWS), Microsoft Azure, OpenShift, Kubernetes, Docker, or similar technologies.
• Experience with security automation and DevSecOps tools, including SonarQube, Snyk, Fortify, Checkmarx, Veracode, OWASP ZAP, Burp Suite, Tenable, Qualys, Rapid7, Splunk, Elastic, or comparable tools.
• Knowledge of Zero Trust Architecture, cloud‑security principles, API security, secure software supply‑chain practices, and software bill of materials (SBOM) management.
• Experience preparing and maintaining federal security artifacts within governance, risk, and compliance (GRC) platforms.
• Experience with security‑control assessments, independent verification and validation, audit support, or Inspector General review support.
• Relevant professional certifications, such as:
• CompTIA Security+;
• Certified Information Systems Security Professional (CISSP);
• Certified Information Security Manager (CISM);
• Certified Authorization Professional (CAP);
• Certified Information Systems Auditor (CISA);
• GIAC Security Essentials (GSEC), GIAC Penetration Tester (GPEN), or similar GIAC certification;
• Certified Ethical Hacker (CEH);
• AWS Certified Security - Specialty;
• Microsoft Certified: Azure Security Engineer Associate.
• Active security clearance or demonstrated eligibility to obtain and maintain the required clearance or suitability determination.

Education Requirements

• Required: Bachelor's degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, Engineering, or a related field; additional relevant experience may be substituted for a degree.

Citizenship & Clearance Requirements

• Required: Secret

Target Salary Range

Compensation for roles at Synergy is determined by a variety of factors including, but not limited to, the requirements of the role; level of experience; education and certifications; the individual's combination of knowledge, skills, and abilities; as well as alignment with market data, federal and state laws, and other business and contract considerations. The estimated pay range for this position is: $116,400.00 - $125,000.00. The disclosed range has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. It is not typical for an individual to be hired at or near the top of the range for their role, and compensation decisions are dependent on the facts and circumstances of each case and represent just one component of Synergy's total compensation package for employees.

Candidate AI Policy

Synergy is committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate evaluation process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in‑person or virtual) is prohibited unless permission is explicitly granted. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

#LI-Remote