Cybersecurity Engineer

Info Gain Consulting; Virginia, Northern (MN, KY); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Info Gain Consulting is seeking a Cybersecurity Engineer to join our team, focusing on supporting the Congressional Budget Office IT support under the Sentry contract. You will help secure the CBO hybrid environment and drive security engineering initiatives.

You should hold enterprise credentials (CISSP, CISM, Security+) and have hands-on experience with IAM, RBAC, PAM, MFA, NIST SP 800-53, and Zero Trust. Proficiency with SIEM/EDR/XDR and cloud security on AWS/Azure is expected.

Qualifications

• Must hold enterprise-security credentials such as CISSP, CISM, or Security+.
• Experience engineering cybersecurity in enterprise/hybrid environments.
• Ability to implement NIST SP 800-53 controls and zero-trust architectures.
• Familiarity with IAM, RBAC, PAM, MFA, and cloud security.

Responsibilities

• Support enterprise cybersecurity engineering across CBO’s hybrid environment.
• Implement NIST SP 800-53 security controls.
• Enforce Zero Trust Architecture per NIST SP 800-207.
• Configure and manage IAM, RBAC, PAM, and MFA controls.
• Support SIEM, EDR, XDR, and continuous-monitoring operations.
• Conduct vulnerability assessments and remediation.
• Support network segmentation and security change management.
• Develop SOPs, security documentation, and audit-readiness artifacts.
• Integrate with 24/7 monitoring operations.

Skills

CISSP

CISM

Security+

Tools

IAM

RBAC

PAM

MFA

Job description

Info Gain Consulting is currently seeking an exceptional Cybersecurity Engineer to join our team. You will be supporting and provide invaluable support to the Congressional Budget office IT support- Sentry contract.

• Recognized enterprise-security credentials such as CISSP, CISM, Security+, or equivalent
• Support enterprise cybersecurity engineering across CBO’s hybrid environment.
• Implement NIST SP 800-53 security controls.
• Enforce Zero Trust Architecture consistent with NIST SP 800-207.
• Configure and manage IAM, RBAC, PAM, and MFA controls.
• Support SIEM, EDR, XDR, and continuous-monitoring operations.
• Conduct vulnerability assessment and remediation.
• Support AWS and Azure cloud-security engineering.
• Perform incident triage, containment, forensic-data collection, and reporting.
• Support network segmentation and security change management.
• Develop SOPs, security documentation, and audit-readiness artifacts.
• Integrate with 24/7 monitoring operations.