Cybersecurity Engineer

All Native Group; Washington (District of Columbia); Hybrid; USD 140,000 - 190,000; Full time

Job summary

All Native Group, a division of Ho Chunk, Incorporated, seeks a Cybersecurity Engineer to design, implement, and maintain security controls enforcing Zero Trust across the Congressional Budget Office's cloud, network, and endpoints.

The role strengthens CBO's security posture, supports incident response, and aligns with NIST SP 800-53 and 800-207, with travel in the Washington, DC area and a hybrid on-site work model.

Qualifications

• Minimum of 5 years of professional cybersecurity engineering experience in enterprise environments.
• Experience with SIEM/EDR/XDR platforms and incident response.
• Experience implementing NIST SP 800-53 and 800-207 controls.
• Bachelor's degree in Cybersecurity, IT, CS, or related field; equivalent experience.
• CompTIA Security+ required; CISSP/GIAC/CEH strongly preferred.

Responsibilities

• Support implementation, operation, and optimization of enterprise security platforms across cloud, on‑premises, and hybrid environments.
• Implement and maintain security controls aligned with NIST SP 800-53 and NIST SP 800-207.
• Design and maintain least-privilege access controls including RBAC, PAM, and MFA.
• Configure and manage IAM solutions with secure authentication and identity provider integration.
• Configure and maintain centralized logging, monitoring, and audit capabilities integrated with SIEM tools.
• Monitor, analyze, and respond to security events using SIEM and EDR/XDR; support triage, containment, investigation, remediation.
• Conduct continuous monitoring, vulnerability assessments, and risk analysis; coordinate remediation aligned with RMF.
• Harden systems and cloud environments (AWS, Azure) using secure configuration baselines.
• Ensure security changes follow change management with documentation and impact analysis.
• Develop and maintain cybersecurity SOPs, configuration records, and asset inventories; perform root cause analysis.

Skills

SIEM operations

EDR/XDR

Incident response

Zero Trust

Cloud security

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

AWS

Azure

Job description

Summary

All Native Group, a division of Ho Chunk, Incorporated, is seeking an exceptional Cybersecurity Engineer to design, implement, and maintain enterprise security controls that enforce Zero Trust principles across the Congressional Budget Office's (CBO) cloud, network, and endpoint environments. The engineer strengthens CBO's security posture and detection and response capabilities, supporting Incident Response remediation and alignment with NIST SP 800-53 and NIST SP 800-207.

Essential Functions

• Support the implementation, operation, and optimization of enterprise security platforms across cloud, on-premises, and hybrid environments.
• Implement and maintain security controls aligned with NIST SP 800-53 (AC, CM, SC, AU, IR, and SI families) and NIST SP 800-207 Zero Trust Architecture.
• Design and maintain least-privilege access controls including RBAC, PAM, and MFA across enterprise systems and applications.
• Configure and manage IAM solutions with secure authentication, authorization, and enterprise identity provider integration.
• Configure and maintain centralized logging, monitoring, and audit capabilities integrated with enterprise SIEM tools.
• Monitor, analyze, and respond to security events using SIEM and EDR/XDR; support triage, containment, investigation, and remediation.
• Conduct continuous monitoring, vulnerability assessments, and risk analysis; coordinate remediation aligned with the NIST RMF.
• Harden systems, applications, and cloud environments (AWS, Azure) using secure configuration baselines.
• Ensure security changes follow formal change management with documentation and security impact analysis.
• Develop and maintain cybersecurity SOPs, configuration records, and asset inventories; perform root cause analysis for security incidents.
• Support continuous, real‑time (24/7) security monitoring and collaborate across network, cloud, and application teams

Competencies

• Strong enterprise security engineering across cloud, network, and endpoint.
• Hands‑on SIEM and EDR/XDR operations and incident response.
• IAM, PAM, and Zero Trust implementation skills.
• Vulnerability management and RMF‑aligned risk analysis.
• Clear documentation and cross‑team collaboration.

Supervisory Responsibility

This position involves executive oversight of multiple program portfolios and senior management teams.

Work Environment

This job operates in executive settings with frequent engagement at the highest levels of Navy leadership. This role uses executive office equipment and classified communication systems.

Physical Demands

The physical demands are typical of executive positions, with extensive travel and high‑stress decision‑making requirements. While performing the duties of this job, the employee is regularly required to talk or hear.

Position Type / Expected Hours of Work

This is a full‑time executive position with flexible hours based on mission requirements.

Travel

Travel is primarily local during the business day. Work is performed in a hybrid environment; on‑site support is performed at CBO facilities in Washington, DC, with occasional support at the Ashburn, VA and Manassas, VA data center locations.

Experience

• Minimum of 5 years of professional cybersecurity engineering experience in enterprise environments.
• Demonstrated experience with SIEM and EDR/XDR platforms and incident response.
• Experience implementing NIST SP 800-53 and NIST SP 800-207 controls.
• Cloud security experience with AWS and/or Azure.

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent professional experience.

Additional Eligibility Qualifications

• CompTIA Security+ required; one of CISSP, GIAC (e.g., GCIH/GCIA), or Certified Ethical Hacker (CEH) strongly preferred.

Certifications (or their equivalent prior certifications) should have been maintained for a minimum of 5 years. Expired certifications or certifications never used professionally will not be considered.

Drug Free Workplace

All Native Group is an Drug Free Workplace. It is our policy that all new hires must successfully complete a pre‑employment drug screen as a condition of employment. In addition, all employees are subject to random drug screens throughout the term of their employment with All Native Group.

Security Clearance

Must be a U.S. citizen or permanent resident. Position requires a Public Trust Tier 2 clearance. Selected candidate must obtain favorable FBI criminal history and fingerprint checks conducted through the U.S. Capitol Police prior to starting work, and pass a background check to access the CBO network.

AAP/EEO Statement

All Native Group is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. However, preference may be extended to persons of Indian descent in accordance with applicable laws.

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.