Cybersecurity Engineer 3

RPMGlobal; Reston, Northern (VA, KY); Hybrid; USD 120,000 - 160,000; Full time

Job summary

RPMGlobal is seeking a Cybersecurity Engineer 3 to design, implement, and maintain cybersecurity infrastructure while staying current on threats and regulatory requirements.

The role emphasizes collaboration with cross-functional teams to integrate security throughout the development lifecycle and ensure robust protection of digital assets and sensitive information.

Qualifications

• 7+ years of experience as a cybersecurity engineer.
• Experience with government regulatory frameworks (NIST SP 800-53, RMF, ICD 503, FISMA, FedRAMP).
• Experience implementing security controls for cloud, container, and DevSecOps environments.

Responsibilities

• Design, implement, and manage security solutions including firewalls, IDS/IPS, endpoint protection, and encryption.
• Conduct regular security assessments to identify vulnerabilities in systems, networks, and applications.
• Develop and implement incident response plans to address security incidents and breaches.
• Collaborate with IT, development, and compliance to enforce security policies and procedures.
• Monitor logs and alerts to detect and respond to security incidents.
• Maintain documentation of security processes and configurations.
• Prepare reports on security findings and actions taken.

Skills

Log analysis

Incident response

Security controls

Cross-functional work

Documentation

Education

Bachelor's Degree

Master's Degree

PhD

Tools

Splunk

Fortify

Acunetix

Prisma Cloud

Cloud security

Job description

Position Summary

We are seeking a skilled and motivated Cybersecurity Engineer 3 to join our dynamic team and play a pivotal role in safeguarding digital assets and sensitive information. The ideal candidate is a dedicated cybersecurity professional with a strong understanding of current threats and vulnerabilities and the ability to implement robust security measures. The Cybersecurity Engineer 3 will contribute to the design, implementation, and maintenance of cybersecurity infrastructure while staying current on emerging trends, regulatory frameworks, and security best practices.

Essential Duties and Responsibilities

• Design, implement, and manage security solutions, including firewalls, intrusion detection/prevention systems, endpoint protection, and encryption mechanisms.
• Conduct regular security assessments to identify vulnerabilities and weaknesses in systems, networks, and applications.
• Develop and implement incident response plans to effectively address security incidents and breaches.
• Collaborate with cross-functional teams to establish and enforce security policies, standards, and procedures.
• Monitor network traffic, system logs, and security alerts to detect and respond to potential security incidents.
• Analyze and investigate anomalies and security breaches, taking appropriate actions to mitigate risks.
• Work closely with IT, software development, compliance, and other cross-functional teams to integrate security into all phases of the development lifecycle.
• Maintain thorough and accurate documentation of security processes, procedures, and configurations.
• Prepare detailed reports on security findings, incidents, and actions taken.

Required Qualifications

• Active Top Secret/SCI with CI Polygraph.
• 7+ years of experience as a cybersecurity engineer with a specialization in designing and building implementations of required security controls.
• Experience implementing continuous monitoring and auditing of solutions for compliance with security controls.
• Strong skills in specifying and implementing log collection into tools such as Splunk.
• Experience querying and analyzing aggregated logs to identify security-relevant anomalies or risks.
• Strong experience implementing security controls from government regulatory frameworks and security standards, including NIST SP 800-53, RMF, ICD 503, FISMA, and FedRAMP.
• Experience implementing controls for cloud, container, and DevSecOps services and solutions within IL5 to IL6+ environments.
• Strong understanding of network protocols, operating systems, and infrastructure components.
• Proficiency in incident response, security incident handling, and forensic analysis techniques.
• Experience with security tools such as Fortify, Acunetix, and Prisma Cloud.
• Effective communication skills, with the ability to convey complex technical concepts to both technical and non-technical stakeholders.
• CISSP or equivalent certification to support DoD 8140 requirements.

Preferred Qualifications

• Not specified.

Required Education and Experience Equivalency

• High School Diploma/GED: N/A
• Associate Degree: N/A
• Bachelor's Degree: 7 years of experience.
• Master's Degree: 7 years of experience.
• PhD: 7 years of experience.

RequiredCertifications

• CISSP or equivalent certification to support DoD 8140 requirements.

Required Security Clearance

• Active Top Secret/SCI with CI Polygraph.