Senior Cyber Security Engineer

Maximus; Northern (KY); On-site; USD 120,000 - 160,000; Full time

Job summary

Maximus is seeking a Senior Cyber Security Engineer to act as a SME across information assurance, compliance, and security operations. The role covers RMF/ATO activities, SIEM tuning, and continuous improvement across IA and Ops workflows.

You will troubleshoot security issues, integrate tools, and help design SecOps processes. The position requires 10+ years of hands-on security engineering, a Public Trust-eligible background, and onsite work in multiple locations.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or related field (or equivalent experience).
• 10+ years of hands-on cybersecurity engineering experience across both compliance and operational functions.
• Solid understanding of NIST 800-53 and RMF processes.
• Hands-on experience with SIEM platforms (Splunk preferred).
• Experience with vulnerability scanning and remediation tooling (Nessus or similar).
• Demonstrated ability to work independently across shifting priorities and team boundaries.
• Strong troubleshooting and root-cause analysis skills.
• Experience handling sensitive/controlled data environments.
• Ability to obtain and maintain a Public Trust clearance.

Responsibilities

• Act as a SME in any area of Cyber as needs dictates.
• Troubleshoot operational security issues (SIEM tuning, vulnerability scanning anomalies, tool integration problems) and recommend fixes.
• Support RMF/ATO activities including evidence gathering, creating continuous monitoring documentation, and leading peer review of deliverables prior to client delivery.
• Identify process gaps and drive continuous improvement initiatives across IA and Ops workflows.
• Provide engineering support services for security tools such as Splunk, Nessus, Redseal, Greenbone, and SALT.
• Support the design and rollout of the ServiceNow SecOps module, including workflow configuration and integration with existing tools.
• Assist in evaluating and integrating AI tools/capabilities into security operations, with attention to associated risk and governance considerations.
• Contribute to data protection engineering for CUI, IP, and Foreign National/Sensitive Country data handling requirements.
• Support cloud security configuration and monitoring efforts.
• Document findings, recommendations, and process changes clearly for technical and leadership audiences.
• Serve as a bridge/translator between compliance requirements and operational implementation.

Skills

SIEM tuning

Vulnerability management

RMF/ATO

Security operations

Data protection engineering

Cloud security engineering

AI security governance

Education

Bachelor's degree in Cybersecurity or related field

Tools

Splunk

Nessus

Redseal

Greenbone

SALT

ServiceNow SecOps

Job description

The Senior Cyber Security Engineer functions as a subject matter expert in Information Assurance/Compliance and Security Operations functions at the National Energy Technology Laboratory (NETL). The engineer will work at all levels of the Cyber organization including operations, compliance analysis / ATO development, troubleshooting operational issues, advising on compliance gaps, and driving process and continuous improvements. The ideal candidate is a technically strong generalist who can perform any Cyber role within the organization as the need dictates.

This role is onsite, 5 days a week, located in Albany, OR, Morgantown, WV, or Pittsburgh, PA.

Due to Federal requirements all candidates must be US citizens and able to successfully pass a government-sponsored process for a position of Public Trust

Maximus TCS (Technology and Consulting Services) Internal Job Profile Code: TCS059, T5, Band 8

• Act as a SME in any area of Cyber as need dictates
• Troubleshoot operational security issues (SIEM tuning, vulnerability scanning anomalies, tool integration problems) and recommend fixes
• Support RMF/ATO activities including evidence gathering, creating continuous monitoring documentation, and leading peer review of deliverables prior to client delivery
• Identify process gaps and drive continuous improvement initiatives across IA and Ops workflows
• Provide engineering support services for security tools such as Splunk, Nessus, Redseal, Greenbone, and SALT
• Support the design and rollout of the ServiceNow SecOps module, including workflow configuration and integration with existing tools
• Assist in evaluating and integrating AI tools/capabilities into security operations, with attention to associated risk and governance considerations
• Contribute to data protection engineering for CUI, IP, and Foreign National/Sensitive Country data handling requirements
• Support cloud security configuration and monitoring efforts
• Document findings, recommendations, and process changes clearly for technical and leadership audiences
• Serve as a bridge/translator between compliance requirements and operational implementation

TCS059, T5, Band 8

Job-Specific Minimum Requirements:

• Bachelor's degree in Cybersecurity, Computer Science, or related field (or equivalent experience)
• Security+, CySA+, GSEC, or equivalent technical certification
• 10+ years of hands-on cybersecurity engineering experience across both compliance and operational functions
• Solid understanding of NIST 800-53 and RMF processes
• Hands-on experience with SIEM platforms (Splunk preferred)
• Experience with vulnerability scanning and remediation tooling (Nessus or similar)
• Demonstrated ability to work independently across shifting priorities and team boundaries
• Strong troubleshooting and root-cause analysis skills
• Experience handling sensitive/controlled data environments
• Ability to obtain and maintain a Public Trust clearance

Preferred Skills and Qualifications:

• Prior ISSE experience
• Vulnerability Management
• Threat Hunting
• Experience with ServiceNow, Redseal, Greenbone, and/or SALT
• Exposure to cloud security engineering (Azure, Google)
• Familiarity with formal governance frameworks and audit/assessment processes
• Experience or interest in AI security/governance considerations

#techjobs #clearance #veteransPage

EEO Statement

Maximus is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information and other legally protected characteristics.

Pay Transparency

Maximus compensation is based on various factors including but not limited to job location, a candidate's education, training, experience, expected quality and quantity of work, required travel (if any), external market and internal value analysis including seniority and merit systems, as well as internal pay alignment. Annual salary is just one component of Maximus's total compensation package. Other rewards may include short- and long-term incentives as well as program-specific awards. Additionally, Maximus provides a variety of benefits to employees, including health insurance coverage, life and disability insurance, a retirement savings plan, paid holidays and paid time off. Compensation ranges may differ based on contract value but will be commensurate with job duties and relevant work experience. An applicant's salary history will not be used in determining compensation. Maximus will comply with regulatory minimum wage rates and exempt salary thresholds in all instances.

Accommodations

Maximus provides reasonable accommodations to individuals requiring assistance during any phase of the employment process due to a disability, medical condition, or physical or mental impairment. If you require assistance at any stage of the employment process—including accessing job postings, completing assessments, or participating in interviews,—please contact People Operations at [e-mail].