Senior Cybersecurity Engineer

Gunnison Consulting Group; Washington, Northern (District of Columbia, KY); Hybrid; USD 135,000 - 145,000; Full time

Benefits offered by this job

Personal Leave

Paid Holidays

Flexible Time Off

401(k) match

Health Insurance

Life and Disability Insurance

Transit Subsidies

Training Allowance

Job summary

Gunnison Consulting Group is seeking a Senior Cybersecurity Engineer to support enterprise security in Washington, DC, on-site. You will work with the Cyber Security SME to implement security measures, develop SOC SOPs, and perform vulnerability analysis with a focus on NIST RMF compliance.

The ideal candidate has 7+ years of cybersecurity engineering experience, hands-on Nessus, a Bachelor’s degree in a related field, and CISSP or equivalent certifications.

Qualifications

• 7+ years in Cybersecurity Engineering and Assessments.
• Strong knowledge of vulnerability scanning tools and system architectures.
• CISSP or Govt-accepted equivalents.
• Bachelor’s degree in Computer Science, Cybersecurity, IT, or related field.

Responsibilities

• Support the Cyber Security SME in implementing security measures.
• Develop and maintain SOC SOPs and assessment processes.
• Perform vulnerability analysis and provide technical recommendations.
• Develop security evaluation plans and test procedures.
• Lead security testing, risk analysis, and countermeasure recommendations.
• Support cloud security engineering in Azure and federal compliance.

Skills

Cybersecurity engineering

NIST RMF

Vulnerability assessment

Education

Bachelor’s degree in Computer Science, Cybersecurity, IT, or related field

CISSP or Govt-accepted equivalents (CISM, CASP+, GIAC)

Tools

Nessus

Job description

Description

*This position is contingent upon a future opening with Gunnison.

Salary: $135,000 - $145,000/year

Work Location: On-site 5 days per week, Washington, DC.

• Support the Cyber Security SME in implementing and maintaining enterprise security measures.
• Develop, enhance, and maintain Security Operations Center (SOC) standard operating procedures (SOPs) and assessment operations processes.
• Ensure accountability, integrity, confidentiality, and protection of operational security processes and data.
• Perform vulnerability analysis, review program-level documentation (system requirements, architectures, design documents, test plans, security plans), and provide technical recommendations.
• Develop and document security evaluation plans, test procedures, and assessment methodologies.
• Conduct hands-on security testing, analyzing results, identifying risk, and recommending countermeasures.
• Assess and calculate risk based on identified threats, vulnerabilities, and security control weaknesses.
• Identify and document mitigation strategies for threats, vulnerabilities, and deficiencies.
• Supporting the design, development, and implementation of security-related systems, tools, and assessment capabilities.
• Participate in and/or lead technical exchange meetings, document action items and outcomes, and brief leadership on security engineering status and results.
• Support SOC alert analysis, triage, escalation, containment actions, and continuous improvement of detection and response use cases.
• Lead the engineering and implementation of secure cloud solutions, primarily in Microsoft Azure, in alignment with NTIA’s cybersecurity strategy and federal compliance mandates (NIST, FISMA, FedRAMP).

Requirements

• 7+ years in Cybersecurity Engineering and Assessments.
• Deep technical knowledge of vulnerability scanning tools and system architectures.
• Hands-on experience with vulnerability scanning tools (e.g., Tenable Nessus).
• Strong knowledge of the NIST RMF.
• CISSP (or Govt-accepted equivalents like CISM, CASP+, or GIAC series).
• Bachelor’s degree in Computer Science, Cybersecurity, IT, or related field.

Clearance Requirement: Public Trust or higher active clearance with the ability to obtain a Secret Clearance.

Desired Qualifications:

• 10+ years of work experience.
• Experience with classified systems.
• Experience developing automated compliance dashboards or integrating Zero Trust architectures.
• Familiarity with specific GRC tools (eMASS, CSAM).
• NTIA or Commerce experience.
• Federal audit response experience (OIG/GAO).
• Cloud Architecture/Engineer Certification (AWS/Azure) or CEH.
• Master’s degree in a technical or management field.
• Additional certifications or advanced degrees in IT, project management, or data management fields
• Active Secret Clearance

The salary range for this position depends upon multiple factors including location, the individual's knowledge, skills, competencies, and experience, and contract-specific budget constraints and organizational requirements.

Gunnison Consulting Group's total compensation package also includes bonus and profit-sharing opportunities, depending on company and employee performance. Available employee benefits include:

• 3 weeks of Personal Leave your first year
• 11 paid Holidays each year
• 5 days of Flexible Time Off each year
• 401(k) company match at 50% up to 10% of your salary
• Medical, Dental and Vision Insurance
• Life and Disability Insurance
• Public Transportation Subsidies
• Certifications and Training Allowance - Up to $5,000/year!

Why Join Gunnison?

• Gunnison takes on ambitious projects. We target fun, challenging work that requires creative thinking and innovation.
• Quality is our top priority.
• Gunnison employee benefits meet or exceed what other companies in the Washington, D.C. metropolitan area offer.
• There is a great sense of camaraderie at Gunnison. This is an atmosphere we will maintain as we continue to grow.
• We are growing rapidly and the opportunity for individual professional growth with Gunnison is outstanding.
• We hire for careers at Gunnison, not to fill a position.

Equal Opportunity Employer. Must be eligible for employment in the United States. We are unable to sponsor candidates at this time.

In 1994 Gunnison began serving the greater Washington, D.C. metro area, focused on tackling our customers' most ambitious technology projects. By creating a culture dedicated to enabling our customers and employees to achieve more than they ever thought they could, the company has thrived for over 25 years.