Cybersecurity Engineer: Zero Trust & Cloud Security

Info Gain Consulting; McLean (VA); On-site; USD 110,000 - 160,000; Full time

Job summary

Info Gain Consulting is seeking a Cybersecurity Engineer to support the Congressional Budget Office IT environment under the Sentry contract. The role involves implementing NIST SP 800-53 controls, enforcing Zero Trust per NIST SP 800-207, and managing IAM/RBAC/PAM/MFA, plus SIEM/EDR/XDR operations.

You will conduct vulnerability assessments, support AWS and Azure cloud security, perform incident triage, and contribute to security documentation and audit readiness.

Qualifications

• Experience supporting enterprise cybersecurity engineering in a hybrid environment.
• Implement and maintain NIST SP 800-53 security controls.
• Enforce Zero Trust Architecture per NIST SP 800-207.
• Configure IAM, RBAC, PAM, and MFA controls.
• Support SIEM, EDR, XDR, and continuous-monitoring operations.
• Conduct vulnerability assessments and remediation.
• Support cloud security engineering in AWS/Azure.
• Perform incident triage, containment, and forensic data collection.
• Contribute to security documentation and audit-readiness artifacts.

Responsibilities

• Support and provide cybersecurity engineering for the CBO IT environment.
• Maintain and improve security controls across hybrid infrastructure.
• Coordinate with monitoring teams for 24/7 security operations.
• Assist in incident response and post-incident reporting.

Skills

Incident response

Vulnerability management

Security best practices

Education

CISSP

CISM

Security+

AWS Security

Tools

AWS

Azure

Job description

Info Gain Consulting is seeking a Cybersecurity Engineer to support the Congressional Budget Office IT environment under the Sentry contract. The role involves implementing NIST SP 800-53 controls, enforcing Zero Trust per NIST SP 800-207, and managing IAM/RBAC/PAM/MFA, plus SIEM/EDR/XDR operations.

You will conduct vulnerability assessments, support AWS and Azure cloud security, perform incident triage, and contribute to security documentation and audit readiness.