Lead Cybersecurity Engineer

Gunnison; Bethesda (MD); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

3 weeks of Personal Leave

11 paid Holidays

Flexible Time Off

401(k) company match

Medical, Dental and Vision Insurance

Life and Disability Insurance

Public Transportation Subsidies

Certifications and Training Allowance

Job summary

Gunnison is seeking a cybersecurity engineering leader to guide enterprise security across networks, email, endpoints, servers, and cloud environments. You will architect, deploy, and operate security tools, conduct threat detection and remediation validation, and produce clear reports for technical and executive audiences.

You will lead a team of cybersecurity engineers, coordinate multiple projects, and regularly interface with government stakeholders to communicate risks and mitigation plans.

Qualifications

• Minimum 3–5 years in cybersecurity engineering or related roles.
• Experience in enterprise network, email, endpoint, server, and cloud security.
• Ability to architect and operate security tools for monitoring and protection.
• Experience with vulnerability management, log analysis, and continuous monitoring.
• Familiarity with RMF, NIST, FISMA, and federal cybersecurity policies.

Responsibilities

• Serve as technical lead for cybersecurity engineering activities.
• Administer and tune security platforms (Tenable, Splunk, BigFix).
• Lead threat detection, event analysis, and remediation validation.
• Prepare technical reports and executive-level briefings.
• Mentor cybersecurity engineers and coordinate multiple initiatives.
• Engage with government stakeholders and program leadership.

Skills

Security engineering

Threat detection

Risk assessment

Customer/stakeholder liaison

Mentoring/leadership

Education

Bachelor's degree in cybersecurity or related field

GIA CISSP (current/active)

GIAC certifications (e.g., GCIH, GCIA, GPEN)

Splunk certifications or equivalent

Tools

Tenable

Splunk

BigFix

Job description

Description

• Serve as the technical lead for cybersecurity engineering activities supporting NIH CIT enterprise services, including network, email, endpoint, server, cloud, and related infrastructure environments.
• Architect, deploy, configure, integrate, operate, and improve cybersecurity tools and technologies used to inspect and protect network traffic, email traffic, endpoints, workstations, and servers.
• Lead security engineering activities involving threat detection, event analysis, log management, vulnerability identification, remediation validation, compromise assessments, and continuous monitoring.
• Provide subject-matter expertise in security industry standards, leading practices, and control implementation, with particular emphasis on compromise assessment, threat detection, endpoint protection, and network security.
• Administer, configure, tune, and analyze outputs from security platforms such as Tenable, Splunk, BigFix, and comparable vulnerability-management, SIEM, endpoint-management, and security-monitoring tools.
• Conduct or support penetration testing, vulnerability assessments, security-control assessments, technical risk analyses, and validation of remediation activities.
• Analyze security events, vulnerabilities, system configurations, and threat indicators; identify risks; recommend mitigations; and track corrective actions through closure.
• Evaluate and help implement security controls across enterprise environments in alignment with RMF, continuous-monitoring requirements, and applicable HHS, NIH, DHS, and other federal cybersecurity policies and directives.
• Consult directly with Government stakeholders, system owners, technical teams, and program leadership on complex security-engineering issues, risk decisions, remediation strategies, and technical implementation approaches.
• Produce clear, accurate technical reports, dashboards, briefings, findings, risk assessments, remediation-status reports, and other artifacts that communicate progress and cybersecurity posture to both technical and executive audiences.
• Lead and mentor cybersecurity engineers and analysts; review technical work products; establish engineering priorities; and coordinate work across multiple concurrent cybersecurity initiatives.
• Participate in customer meetings, technical working groups, incident-related activities, and project reviews; communicate risks, dependencies, milestones, and recommended next steps.
• Develop and maintain standard operating procedures, engineering documentation, security architecture diagrams, implementation guides, and repeatable processes for cybersecurity operations.

Work location

Hybrid, 2-3 days per week on-site in Bethesda, MD.

Requirements

• Minimum of three (3) to five (5) years of progressively responsible cybersecurity engineering, network security, information-security operations, or related technical experience.
• Security engineering for enterprise network, email, endpoint, workstation, server, and/or cloud environments.
• Architecting, deploying, configuring, and operating cybersecurity tools used for network inspection, email security, endpoint security, vulnerability management, security monitoring, or log analysis.
• Vulnerability management, continuous monitoring, compromise assessments, security-control assessments, penetration testing, or remediation validation.
• Security platforms such as Tenable, Splunk, BigFix, or functionally comparable technologies.
• Network engineering and cybersecurity concepts, including traffic analysis, security logging, intrusion detection/prevention, endpoint protection, and system hardening.
• Preparing technical reports and customer-facing briefings that communicate security findings, risks, remediation progress, and recommended actions.
• Consulting with customers and technical stakeholders on security-engineering, compliance, risk-management, and remediation issues.
• Applying federal cybersecurity requirements, including familiarity with HHS, NIH, DHS, NIST, FISMA, RMF, and continuous-monitoring principles
• GIAC certification, current/active
• Certified Information Systems Security Professional (CISSP), current/active
• Splunk certification, such as Splunk Core Certified Power User, Splunk Enterprise Certified Admin, Splunk Core Certified Advanced Power User, or comparable Splunk security/engineering credential
• Bachelor’s degree from an accredited college or university in cybersecurity, information assurance, computer science, information systems, computer engineering, network engineering, electrical engineering, or a closely related technical discipline

Clearance Requirement: Ability to obtain and maintain a Public Trust.

Desired Qualifications

• Master’s degree in cybersecurity, information assurance, computer science, information systems, engineering, data analytics, or a related technical discipline.
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)
• Certified Authorization Professional (CAP)
• Certified Cloud Security Professional (CCSP)
• CompTIA Security+, CySA+, PenTest+, or CASP+
• EC-Council Certified Ethical Hacker (CEH) or equivalent penetration-testing certification
• Offensive Security Certified Professional (OSCP) or equivalent offensive-security credential
• Tenable/Nessus certification or advanced Tenable platform training
• BigFix administration, endpoint-management, or related platform certification
• AWS Certified Security – Specialty
• Microsoft Certified: Azure Security Engineer Associate
• Google Professional Cloud Security Engineer
• Cisco security certifications, including CCNA CyberOps, CCNP Security, or equivalent
• GIAC incident-response, intrusion-analysis, penetration-testing, or cloud-security certifications, such as GCIH, GCIA, GPEN, GSEC, GREM, or GCLD
• ITIL Foundation or PMP, particularly for candidates who will manage engineering workstreams or customer deliverables

The salary range for this position depends upon multiple factors including location, the individual's knowledge, skills, competencies, and experience, and contract-specific budget constraints and organizational requirements.

Benefits

• 3 weeks of Personal Leave your first year
• 11 paid Holidays each year
• 5 days of Flexible Time Off each year for approved training or certifications (self-study is ineligible)
• 401(k) company match at 50% up to 10% of your salary
• Medical, Dental and Vision Insurance
• Life and Disability Insurance
• Public Transportation Subsidies
• Certifications and Training Allowance - Up to $5,000/year!

Why Join Gunnison?

• Gunnison takes on ambitious projects. We target fun, challenging work that requires creative thinking and innovation.
• Quality is our top priority.
• Gunnison employee benefits meet or exceed what other companies in the Washington, D.C. metropolitan area offer.
• There is a great sense of camaraderie at Gunnison. This is an atmosphere we will maintain as we continue to grow.
• We are growing rapidly and the opportunity for individual professional growth with Gunnison is outstanding.
• We hire for careers at Gunnison, not to fill a position.

Equal Opportunity/Affirmative Action Employer. Must be eligible for employment in the United States. We are unable to sponsor candidates at this time.

In 1994 Gunnison began serving the greater Washington, D.C. metro area, focused on tackling our customers' most ambitious technology projects. By creating a culture dedicated to enabling our customers and employees to achieve more than they ever thought they could, the company has thrived for over 25 years.