Cybersecurity Engineer

Eliassen Group; Washington (District of Columbia); Hybrid; USD 90,000 - 96,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401k with company matching

Life insurance

Job summary

Eliassen Group is seeking a seasoned cybersecurity professional in the Washington, DC area for a contract-to-hire role. You will lead assessments, implement controls, and guide incident response in an enterprise setting, collaborating with stakeholders to reduce risk.

The position requires deep hands-on security experience, strong reporting skills, and the ability to work hybrid on-site as needed in Washington, DC. A W-2 arrangement with benefits is provided through the client program.

Qualifications

• Minimum 7 years of professional cybersecurity experience.
• Hands-on with firewalls, IDS/IPS, EDR, DLP, SIEM and vulnerability assessment tools.
• Knowledge of NIST CSF, ISO 27001, GDPR and HIPAA compliance.

Responsibilities

• Lead vulnerability assessments and document weaknesses identified.
• Analyze security logs to produce risk-based remediation reports.
• Design, deploy and manage security controls (firewalls, SIEM, DLP).
• Monitor incidents; investigate breaches and coordinate response.
• Administer access controls and enforce security policies.
• Develop and maintain incident response plans and forensics.
• Research threats and evaluate new security technologies.

Skills

Vulnerability assessment

Incident response

Network security

Firewalls/IDS/IPS

EDR

DLP

SIEM

Cloud security

Python/PowerShell

Education

Bachelor's degree in CS/IT

Tools

SIEM

EDR

Vulnerability scanners

Job description

Hybrid (on-site work) as needed in Washington, DC

Our client seeks a seasoned cybersecurity professional to lead assessments, implement and manage controls, and guide incident response for an enterprise environment. The role will evaluate and strengthen security posture across networks, endpoints, and cloud, while producing clear reporting and collaborating with stakeholders to mitigate risk.

This is a contract-to-hire opportunity. Applicants must be willing and able to work on a w2 basis and convert to FTE following contract duration. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Rate: $65.00 to $70.00/hr. w2

Responsibilities

• Perform vulnerability assessments using tools and techniques including network scanning, code reviews, and penetration testing to identify and document weaknesses.
• Analyze security logs to identify suspicious activity and generate comprehensive reports with risks and remediation recommendations.
• Design, deploy, configure, and manage security controls: firewalls, IDS/IPS, EDR, ZTS, SIEM, and DLP.
• Monitor alerts and anomalies, investigate incidents, and respond to breaches effectively.
• Administer security access controls for authentication, authorization, and access rights.
• Implement and maintain security policies, procedures, and standards.
• Develop and maintain incident response plans; conduct investigations, evidence collection, and forensics to determine root causes.
• Research emerging threats, vulnerabilities, and attack vectors; evaluate and recommend new security technologies.

Experience Requirements

• Minimum 7 years of professional experience in cybersecurity or related fields such as systems administration or network engineering.
• Hands-on experience with firewalls, IDS/IPS, EDR, ZTS, DLP, SIEM, and vulnerability assessment solutions.
• Knowledge of cybersecurity principles, attack vectors, security frameworks such as NIST CSF and ISO 27001, and regulatory requirements including GDPR and HIPAA.
• Proficiency in network security concepts, protocols such as TCP/IP, UDP, DNS, and common network devices.
• Technical expertise with scripting languages such as Python or PowerShell, CLI, and operating systems including Windows, Linux, and macOS.
• Analytical and problem-solving skills with the ability to identify root causes and develop effective solutions.
• Clear communication skills for technical and non-technical audiences.
• Strong attention to detail and organizational skills with the ability to manage priorities independently.
• At least one current or lapsed certification with agreement to recertify within 3 months: CompTIA Security+, Microsoft Azure Security Technologies, Zscaler, CrowdStrike, Splunk, CEH, CISSP, or GIAC (e.g., GCIH, GPEN, GCIA).

Education Requirements

• Bachelor’s degree in Computer Science, Information Technology, or related field preferred.
• Clearance requirement: Ability to obtain and maintain a Public Trust.