Cybersecurity Engineer, Lead

Indigo IT LLC; Ashburn (VA); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision coverage

401(k) with company match

Paid time off

Job summary

Indigo IT LLC is seeking an experienced cybersecurity professional in Ashburn, VA to support Risk Management Framework activities, SA&A, and continuous monitoring. You will analyze security posture, coordinate with teams, and help ensure compliant deployments across government-oriented environments.

The role requires hands-on experience with Nessus, Splunk, Tanium, and STIGs, plus strong reporting skills and leadership potential. Hybrid work arrangement in Ashburn, VA is offered.

Qualifications

• Hands-on experience with detecting, monitoring, and remediating security issues.
• Experience performing compliance testing and vulnerability management.
• Knowledge of federal information systems and risk management requirements.

Responsibilities

• Execute RMF continuous monitoring activities.
• Lead SA&A activities and produce auditable security evidence.
• Test and verify system compliance with defined standards and baselines.
• Record, analyze, and report test data for hardware and software.
• Support senior leadership on information assurance posture.

Skills

FISMA/NIST knowledge

Cybersecurity incident response

Risk management framework (RMF)

SIEM/Tanium/Nessus experience

Security testing & assessment

Port/protocol analysis

Policy development

Team leadership

Education

Bachelor's degree in Cybersecurity/CS/IT

Advanced degree preferred

Tools

Tenable Nessus

Security Center

Tanium

Splunk

ISVM/STIGs/GPO

Job description

SUMMARY

Founded in 2001, Indigo IT is an award-winning information technology consulting and services company. We are a trusted services provider to government agencies seeking innovative Cloud, Cybersecurity, Knowledge Management, and Enterprise solutions. We know our defense, federal, and civilian customers have critical IT infrastructures that must remain reliable, available, and maximized. Indigo IT is mission focused and committed to maintaining a sense of urgency in anticipating and supporting our customers’ technology goals and objectives. Our unique ability to think beyond today allows our clients to stay ahead of their IT challenges. Recognized on the Inc. 5000 list of America’s fastest growing companies in 2020, 2021, and named as one of the 2022 Best Places to Work in Virginia, we are always looking to hire top talent in the field - come join us today!

Ashburn, VA (hybrid)

Founded in 2001, Indigo IT is an award-winning information technology consulting and services company. We are a trusted services provider to government agencies seeking innovative Cloud, Cybersecurity, Knowledge Management, and Enterprise solutions. We know our defense, federal, and civilian customers have critical IT infrastructures that must remain reliable, available, and maximized. Indigo IT is mission focused and committed to maintaining a sense of urgency in anticipating and supporting our customers’ technology goals and objectives. Our unique ability to think beyond today allows our clients to stay ahead of their IT challenges. Recognized on the Inc. 5000 list of America’s fastest growing companies in 2020, 2021, and named as one of the 2022 Best Places to Work in Virginia, we are always looking to hire top talent in the field - come join us today!

ESSENTIAL FUNCTIONS/RESPONSIBILITIES

• Supports the execution of the Risk Management Framework (All facets, especially Continuous Monitoring).
• Participates in and leads as required Security Assessment & Authorization (SA&A) activities.
• Performs conformance testing to assess whether a system complies with defined specifications or standards (system and application baselines).
• Assist other team members with the test bed environment to test and verify hardware and support peripherals to ensure that they meet specifications and requirements by recording and analyzing test data.
• Create auditable evidence of security measures.
• Assist with conducting and monitoring Independent Validation and Verification (IV&V) testing for software applications and systems.
• Advise appropriate senior leadership or authorizing official of charges affecting the organization's information assurance posture.
• Collect and maintain data needed to meet system information assurance reporting.
• Coordinate with team members to ensure that information assurance inspections, tests, and reviews are coordinated for the environment.
• Perform operational security tasks as assigned to include incident handling and analysis and prepare appropriate reports to keep senior leadership informed.
• Utilize existing security tools in place to perform RMF continuous monitoring activities
• Ability to analyze port, protocol, and network traffic information to make intelligent decisions regarding the real-time information security posture of the organization.
• Adhere to the information assurance requirements which are integrated into the continuity planning for that system and/or organization(s).
• Support corporate business development by providing subject matter expertise in the development of proposals, white papers, and requests for information as needed.

SPECIFIC KNOWLEDGE, SKILLS, & ABILITIES

• Advanced or Expert knowledge and/or work experience in:
• Information Certification & Accreditation Regulations, Federal Information Security Management Act (FISMA), and National Institute of Standards and Technology (NIST) guidance.
• Ability to Identify, collect, process, document, and report cyber security/incident response events.
• Developing and implementing cyber security/incident response policies and procedures; engineering, testing, installing, patching, and upgrading various information security hardware and software applications
• Contingency plan creation, modification, and testing.
• Zero Trust Implementation and environment
• Experience with Tenable Nessus, Security Center, Tanium (or similar tools).
• Experience with SPLUNK or other SEIM.
• Experience with ISVM, Security Patch/Patches, Vulnerabilities, Configuration (STIGs), and GPO/Group Policy.
• Experience with CISA KEV list and implementation deadlines
• Operations-based testing scenarios.
• Ability to recommend improvements to internal processes to maximize customer service levels and improve overall security posture of the organization.
• Excellent time management skills, with ability to juggle multiple priorities and complete tasks on time
• Strong analytical skills with the ability to analyze data sets to determine trends, establish strategies, and make decisions about real time threats as well as identification and elimination of false positives from operational reports.
• Outstanding interpersonal and communication skills with the ability to effectively communicate across diverse audiences.
• Self-starter, ability to work effectively both independently and as part of a team including the ability and desire to own every aspect of a task from start to finish.
• Experience leading teams and providing feedback to junior members.
• Familiar with FISMA law and working with FISMA systems.
  • Maintaining and acquiring Authority to Operate
  • Assisting with all phases of Authority to Test, including testing.
  • Writing Risk Acceptance proposals
  • Working with technology evaluation boards to get products and services evaluated for use within the enterprise.
• Works with the ISSO and ISSM for field support to assist with tracking and closing Plans of Actions and Milestones (POA&Ms)
• Provides expert guidance to management in relation to findings brought to the group from the Vulnerability Assessment Team (VAT) in coordination with the ISSO
• Helps Junior Staff provide accurate FISMA system inventory for asset management and VAT scanning purposes.

DESIRED EDUCATION, EXPERIENCE, & CERTIFICATIONS

• Current CBP Background Investigation or Top-Secret clearance adjudicated within the last 5 years (preferred).
• Must have at least 5 years of hands-on experience with detecting, monitoring, and remediating various security sets, to include network, hardware, software, and platform security.
• Must have demonstratable experience in performing compliance control testing, identification and resolution of cybersecurity issues, and developing remediation or mitigation strategies.
• Bachelor's or master's degree (master’s preferred) in Cybersecurity, Computer Science, Computer Information Systems, or Information Technology. In lieu of a college degree, 10 years of demonstrated hands-on experience in control testing, vulnerability identification and resolution, and developing recommendations to minimized cybersecurity risk will be considered.
• Must possess one or multiple of the following certifications – ISC2 Certified Information Systems Security Professional (CISSP), EC-Council Certified Ethical Hacker, or CompTIA Security Analytics Expert. Equivalent certifications may be considered.

At Indigo IT, we offer an expansive benefits package for our employees, which includes: Medical, Dental, and Vision coverage options. In addition, we offer 401(k) with company match, Group life and disability, Flex Spending Accounts (FSA), Paid Time Off (PTO), Paid holidays, and Education assistance. We also have in house training programs for employees, we reward thought leadership with bonuses and recognition for publishing, speaking, and innovative thought leadership in our industry.

Indigo IT is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. This employer uses E-Verify.