Senior Cyber Security Engineer: Zero Trust & Threat Intel

DLH Corp; Bethesda (MD); On-site; USD 150,000 - 170,000; Full time

Benefits offered by this job

PTO

Medical/Dental/Vision

401(k) with match

Education assistance

E-learning and certification support

Job summary

DLH Corp is seeking a highly skilled Senior Cyber Security Engineer to strengthen cybersecurity posture for a federal client in Bethesda, MD. The role focuses on vulnerability management, secure engineering, DevSecOps integration, and threat detection within multi-tenant cloud and on-prem environments.

Ideal candidate is self-motivated, takes ownership, and communicates findings to both technical and non-technical stakeholders while prioritizing risk across enterprise systems.

Qualifications

• Bachelor’s degree or higher with years of cybersecurity experience as specified.
• Experience in cybersecurity, vulnerability management, systems engineering, or related fields.
• Strong experience with vulnerability management programs, including risk prioritization using CVSS, threat intelligence, and exploit data (e.g., CVEs, CISA KEV).
• Working knowledge of DevSecOps practices and integrating security into CI/CD pipelines.
• Hands-on experience with MDAV and endpoint security solutions.
• Familiarity with cloud environments and containerized applications (ARO, Kubernetes)
• Experience with SIEM platforms such as Splunk for detection and analysis.
• Strong understanding of security frameworks and compliance standards (NIST SP 800-53, 800-171, 800-37, FedRAMP, FISMA, ISO 27001, CIS Benchmarks, DISA STIGs).
• Knowledge of enterprise security architecture and Zero Trust principles.

Responsibilities

• Integrate Zero Trust Architecture into enterprise environments through gap analysis, security maturity assessments, and risk-based control implementation
• Contribute to enterprise security architecture, including identity and access management and cloud security design
• Lead and support vulnerability management efforts, including identification, prioritization, and remediation of vulnerabilities based on risk, exploitability, and business impact
• Analyze and operationalize threat intelligence sources, including CVE databases and the CISA KEV catalog, to prioritize remediation and strengthen defenses
• Perform vulnerability assessments using tools such as Tenable Nessus and web application scanners, and triage findings to reduce false positives/negatives
• Utilize Microsoft Defender Antivirus (MDAV) and endpoint detection tools to monitor, detect, and respond to threats across endpoints
• Collaborate with DevSecOps, infrastructure, and development teams to incorporate security controls and automated scanning (SCA, SAST, DAST) into CI/CD pipelines and SDLC practices
• Develop and maintain a SIEM solution, such as Splunk, for queries, dashboards, and reports to identify trends, detect anomalies, and highlight control gaps
• Support continuous monitoring and improve detection capabilities across hybrid enterprise environments, including on-premises, cloud, and containers.
• Develop clear technical documentation, including assessment reports, mitigation strategies, and implementation guidance
• Stay current on emerging threats, vulnerabilities, federal cybersecurity directives, and industry best practices

Skills

Zero Trust Architecture

Vulnerability management

Threat intelligence

DevSecOps integration

Communication skills

Security frameworks

Education

Bachelor’s degree in Computer Science, Cybersecurity, Software Engineering, or related field

Master’s degree in Computer Science, Cybersecurity, Software Engineering, or related field

High School Diploma with 12+ years of experience

Tools

Tenable Nessus

MDAV / Microsoft Defender Antivirus

Splunk

CI/CD security tooling (SCA, SAST, DAST)

Kubernetes

Cloud platforms (AWS/Azure/GCP)

Job description

DLH Corp is seeking a highly skilled Senior Cyber Security Engineer to strengthen cybersecurity posture for a federal client in Bethesda, MD. The role focuses on vulnerability management, secure engineering, DevSecOps integration, and threat detection within multi-tenant cloud and on-prem environments.

Ideal candidate is self-motivated, takes ownership, and communicates findings to both technical and non-technical stakeholders while prioritizing risk across enterprise systems.