Senior Cyber Security Engineer (Job 1480)

DHL Holdings Corp; Austin (TX); On-site; USD 150,000 - 170,000; Full time

Benefits offered by this job

401(k) Retirement Plan

PTO

Medical, dental, vision coverage

Disability coverage

Flexible spending accounts

Education/certification assistance

Job summary

DLH Corp seeks a Senior Cyber Security Engineer to fortify a federal client’s defenses in Bethesda, MD, focusing on vulnerability management, secure engineering, DevSecOps, and Zero Trust across hybrid cloud and on-premises environments.

The role requires strong collaboration across security, infrastructure, and development teams, with the ability to communicate complex findings to diverse stakeholders and ensure risk-based controls are implemented effectively.

Qualifications

• Bachelor's or Master's degree with required years of experience; or extensive work experience.
• Experience in cybersecurity, vulnerability management, systems engineering, or related fields
• Strong experience with vulnerability management programs, including risk prioritization using CVSS, threat intelligence, and exploit data (e.g., CVEs, CISA KEV)
• Working knowledge of DevSecOps practices and integrating security into CI/CD pipelines
• Hands-on experience with Microsoft Defender Antivirus (MDAV) and endpoint security solutions
• Experience with vulnerability scanning and assessment tools (e.g., Tenable Nessus, web application scanners)
• Familiarity with cloud environments (AWS, Azure, or GCP) and containerized applications (ARO, Kubernetes)
• Experience with SIEM platforms such as Splunk for detection and analysis
• Strong understanding of security frameworks and compliance standards (NIST SP 800-53, 800-171, 800-37, FedRAMP, FISMA, ISO 27001, CIS Benchmarks, DISA STIGs)
• Knowledge of enterprise security architecture and modern security principles, including Zero Trust
• Working knowledge of AI security risk management frameworks and the ability to translate AI/ML use cases into security controls, review checkpoints, and governance decisions
• Strong analytical, problem-solving, and communication skills
• Must be able to obtain a Public Trust clearance

Responsibilities

• Integrate Zero Trust Architecture into enterprise environments through gap analysis, security maturity assessments, and risk-based control implementation
• Contribute to enterprise security architecture, including identity and access management and cloud security design
• Lead and support vulnerability management efforts, including identification, prioritization, and remediation of vulnerabilities based on risk, exploitability, and business impact
• Analyze and operationalize threat intelligence sources, including CVE databases and the CISA KEV catalog, to prioritize remediation and strengthen defenses against actively exploited vulnerabilities
• Perform vulnerability assessments using tools such as Tenable Nessus and web application scanners, and triage findings to reduce false positives/negatives
• Utilize Microsoft Defender Antivirus (MDAV) and endpoint detection tools to monitor, detect, and respond to threats across endpoints
• Collaborate with DevSecOps, infrastructure, and development teams to incorporate security controls and automated scanning (SCA, SAST, DAST) into CI/CD pipelines and SDLC practices
• Develop and maintain a SIEM solution, such as Splunk, for queries, dashboards, and reports to identify trends, detect anomalies, and highlight control gaps
• Support continuous monitoring and improve detection capabilities across hybrid enterprise environments, including on-premises, cloud, and containers.
• Develop clear technical documentation, including assessment reports, mitigation strategies, and implementation guidance
• Stay current on emerging threats, vulnerabilities, federal cybersecurity directives, and industry best practices

Skills

Cybersecurity experience

Vulnerability management

DevSecOps

MDAV / endpoint security

Vulnerability scanning

Cloud security

SIEM (Splunk)

Security frameworks (NIST, ISO, etc.)

Zero Trust

AI security risk management

Communication skills

Public Trust clearance

Education

Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, or related field

Master's degree in Computer Science, Cybersecurity, Software Engineering, or related field

High School Diploma with 12 years relevant experience

Tools

Tenable Nessus

Web application scanners

Splunk

SCA / SAST / DAST

PowerShell

Python

Job description

Bethesda, Maryland

Position Title: Senior Cyber Security Engineer (Job 1480)

About Us

DLH delivers improved health and national security readiness solutions for federal programs through science research and development, systems engineering and integration, and digital transformation. Our experts in public health, performance evaluation, and health operations solve the complex problems faced by civilian and military customers alike by leveraging advanced tools including digital transformation, artificial intelligence, data analytics, cloud enablement, modeling, and simulation, and more. DLH is dedicated to the idea that Your Mission is Our Passion and brings a unique combination of government sector experience, proven methodology, and unwavering commitment to innovation to improve the lives of millions.

Overview

DLH is seeking a highly skilled Senior Cyber Security Engineer to support a federal client in Bethesda, MD. This role focuses on strengthening enterprise cybersecurity posture through a combination of vulnerability management, secure engineering practices, DevSecOps integration, and advanced threat detection, while incorporating Zero Trust principles as part of a comprehensive defense strategy in multi-tenant cloud and on-premises environments.

The ideal candidate should be self-motivated and able to take ownership of workflows

They will bring experience identifying and prioritizing risk across enterprise systems, applying defense-in-depth principles across platforms, and leveraging security tools and threat intelligence (including CVE and CISA Known Exploited Vulnerabilities (KEV)) to proactively mitigate threats.

This role requires strong collaboration across security, infrastructure, and development teams, as well as the ability to communicate technical findings to both technical and non-technical stakeholders.

Responsibilities

• Integrate Zero Trust Architecture into enterprise environments through gap analysis, security maturity assessments, and risk-based control implementation
• Contribute to enterprise security architecture, including identity and access management and cloud security design
• Lead and support vulnerability management efforts, including identification, prioritization, and remediation of vulnerabilities based on risk, exploitability, and business impact
• Analyze and operationalize threat intelligence sources, including CVE databases and the CISA KEV catalog, to prioritize remediation and strengthen defenses against actively exploited vulnerabilities
• Perform vulnerability assessments using tools such as Tenable Nessus and web application scanners, and triage findings to reduce false positives/negatives
• Utilize Microsoft Defender Antivirus (MDAV) and endpoint detection tools to monitor, detect, and respond to threats across endpoints
• Collaborate with DevSecOps, infrastructure, and development teams to incorporate security controls and automated scanning (SCA, SAST, DAST) into CI/CD pipelines and SDLC practices
• Develop and maintain a SIEM solution, such as Splunk, for queries, dashboards, and reports to identify trends, detect anomalies, and highlight control gaps
• Support continuous monitoring and improve detection capabilities across hybrid enterprise environments, including on-premises, cloud, and containers.
• Develop clear technical documentation, including assessment reports, mitigation strategies, and implementation guidance
• Stay current on emerging threats, vulnerabilities, federal cybersecurity directives, and industry best practices

Qualifications

• Bachelors degree in Computer Science, Cybersecurity, Software Engineering, or related field with a minimum of 10 years of experience; or Masters degree in Computer Science, Cybersecurity, Software Engineering, or related field with a minimum of 6 years of experience; or High School Diploma with a minimum of 12 years of relevant experience.
• Experience in cybersecurity, vulnerability management, systems engineering, or related fields
• Strong experience with vulnerability management programs, including risk prioritization using CVSS, threat intelligence, and exploit data (e.g., CVEs, CISA KEV)
• Working knowledge of DevSecOps practices and integrating security into CI/CD pipelines
• Hands-on experience with Microsoft Defender Antivirus (MDAV) and endpoint security solutions
• Experience with vulnerability scanning and assessment tools (e.g., Tenable Nessus, web application scanners)
• Familiarity with cloud environments (AWS, Azure, or GCP) and containerized applications (ARO, Kubernetes)
• Experience with SIEM platforms such as Splunk for detection and analysis
• Strong understanding of security frameworks and compliance standards (NIST SP 800-53, 800-171, 800-37, FedRAMP, FISMA, ISO 27001, CIS Benchmarks, DISA STIGs)
• Knowledge of enterprise security architecture and modern security principles, including Zero Trust
• Working knowledge of AI security risk management frameworks and the ability to translate AI/ML use cases into security controls, review checkpoints, and governance decisions
• Strong analytical, problem-solving, and communication skills
• Must be able to obtain a Public Trust clearance

Preferred Certifications

• Related Cyber certification, such as CYSA, CISSP, CISM or equivalent
• DevSecOps or secure development certifications
• AI management or security certifications
• Vulnerability management or threat intelligence-related certificationsCloud security certifications (Azure, AWS, or GCP)
• Proficiency in scripting/automation (PowerShell, Python, Bash, etc.)

Basic Compensation: $150,000 - $170,000 yearly salary

The salary range listed reflects what we reasonably expect to pay for this role at the time of posting. The final offer may vary based on skills, experience, geographic location, market conditions, and internal equity. Additional compensation may include performance incentives and program-specific awards. We do not use salary history to determine compensation, in line with applicable law.

Benefits

DLH Corp offers our employees an excellent benefits package, including Personal Time Off (PTO), medical, dental, vision, supplemental life with AD&D, disability coverage, flexible spending accounts, and more. We want our employees to save for their future; therefore, we offer a 401(k) Retirement Plan, which includes a matching component. DLH is dedicated to your career development, providing training to help drive success, with access to our best-in-class e-learning suite for formal and informal learning, professional and technical certification preparation, and education assistance at accredited institutions.

EEO

DLH Corporation is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment. DLH will provide reasonable accommodation to individuals with disabilities and disabled Veterans who need assistance to apply.

DLH is committed to maintaining a fair and authentic interview process

PI287461827