Senior Cyber Security Engineer

ecsfederal; Virginia (MN); Hybrid; USD 165,000 - 200,000; Full time

Job summary

ECS Federal is seeking a Senior Cyber Security Engineer to work remotely. The role focuses on protecting Veterans’ data and VA systems with deep technical expertise in regulatory compliance, strategic planning, and cross-functional leadership.

Salary range $165,000 - $200,000. The position emphasizes federal security standards (NIST, ISO, SOC 2), zero-trust design, and securing enterprise networks, cloud environments, and hybrid architectures.

Qualifications

• 8+ years in cybersecurity operations, ideally within a federal or VA environment.
• 8+ years securing enterprise networks, cloud environments, and hybrid architectures, including zero-trust principles.
• 8+ years designing and implementing secure system architectures and zero-trust models.
• 8+ years working with Python, PowerShell, or Bash for automating security tasks, vulnerability scanning, and log analysis.
• Deep understanding of firewalls, intrusion detection/prevention systems (IDS/IPS), VPNs, network segmentation, TCP/IP, and wireless security.
• Ability to detect, analyze, and mitigate cyber threats quickly, minimizing damage and downtime; familiarity with NIST, SANS, and CIS frameworks.
• Experience with NIST, ISO, SOC 2, and other federal security standards.
• Moderate to advanced knowledge of Windows, Linux, VMs, containers, and server administration.
• Understanding of federal regulations (e.g., FISMA, HIPAA for VA health data) and ability to map security controls to compliance requirements.
• Support ZTA initiatives, ensuring access controls and segmentation are enforced across cloud and on-prem environments.
• Conduct vulnerability assessments and recommend remediation strategies.
• Collaborate with VA stakeholders to ensure compliance with FedRAMP and VA-specific security requirements.
• Develop and enforce security policies and ensure compliance with regulatory standards.

Skills

Cybersecurity operations

Enterprise networks

Cloud security

Zero-Trust architecture

Secure system design

Automation scripting

Threat detection & response

Firewall/IDS/IPS

NIST/SANS/CIS standards

FedRAMP/VA compliance

Windows/Linux/VMs/containers

FISMA/HIPAA compliance

Job description

ECS is seeking a Senior Cyber Security Engineer to work remotely.

At Everforth ECS Federal, we believe technology should serve those who have served us. Partnering with the U.S. Department of Veterans Affairs, we safeguard critical systems and sensitive data that directly impact the lives of millions of veterans and their families.

As a Senior Cyber Security Engineer, you will bring your deep technical expertise with regulatory compliance, strategic planning, and cross-functional leadership to protect Veterans’ data and VA systems.

Salary Range: $165,000 - $200,000

General Description of Benefits

• Must be a U.S. citizen eligible to obtain and maintain a Tier 5 (critical sensitive national security) background investigation.
• 8+ years in cybersecurity operations, ideally within a federal or VA environment.
• 8+ years securing enterprise networks, cloud environments, and hybrid architectures, including zero-trust principles.
• 8+ years designing and implementing secure system architectures and zero-trust models.
• 8+ years working with Python, PowerShell, or Bash for automating security tasks, vulnerability scanning, and log analysis.
• Deep understanding of firewalls, intrusion detection/prevention systems (IDS/IPS), VPNs, network segmentation, TCP/IP, and wireless security.
• Ability to detect, analyze, and mitigate cyber threats quickly, minimizing damage and downtime; familiarity with NIST, SANS, and CIS frameworks.
• Experience with NIST, ISO, SOC 2, and other federal security standards.
• Moderate to advanced knowledge of Windows, Linux, VMs, containers, and server administration.
• Understanding of federal regulations (e.g., FISMA, HIPAA for VA health data) and ability to map security controls to compliance requirements.
• Support ZTA initiatives, ensuring access controls and segmentation are enforced across cloud and on-prem environments.
• Conduct vulnerability assessments and recommend remediation strategies.
• Collaborate with VA stakeholders to ensure compliance with FedRAMP and VA-specific security requirements.
• Develop and enforce security policies and ensure compliance with regulatory standards.