Senior Cybersecurity Engineer

We are looking for Senior Cybersecurity Engineer for our client in Reston, VA

Job Title: Senior Cybersecurity Engineer

Job Location: Reston, VA

Job Type: Contract

Job Overview:

Requirement/Must Have:

• 5+ years relevant IT security experience.
• Bachelor's Degree in Computer Science, Information Technology, or related field.
• In lieu of a bachelor's degree, an additional 4 years of relevant work experience is required in addition to the required work experience.

Responsibilities:

• Assists with day-to-day support of security solutions.
• Assists with engineering support and system administration of specialized cybersecurity solutions.
• Solves complex problems and answers routine questions about the installation, operation, configuration, and customization of cybersecurity software.
• Identifies potential conflicts with the implementation of any cybersecurity solutions.
• Answers routine questions about the installation, operation, configuration, and customization of cybersecurity solutions.
• Reviews and analyzes appropriate cybersecurity solution system logs for performance and functional anomalies.
• Works with system design architects and project managers to provide security requirements.

Nice to Have:

• Strong hands-on experience in Application security, secure SDLC, DevSecOps, Cloud Security and vulnerability management.
• Deep understanding of OWASP top 10, API security top 10, common vulnerability classes, secure coding practices, and modern exploit techniques.
• Hands-on experience with security testing tools and techniques, including SAST, DAST, IAST, SCA, manual penetration testing, secure code review, and threat modeling.
• Extensive experience with CNAPP, CSPM, KSPM, CWPP or cloud native security platforms, preferably tools such as Wiz, CrowdStrike or similar solutions.
• Hands-on experience securing cloud environments, preferable AWS, including services such as IAM, EC2, S3, Lambda, EKS, CloudTrail, Security Hub, Guard Duty, or similar services.
• Deep knowledge of Kubernetes and container security, including Amazon EKS, pod security, RBAC, network policies, image security, runtime security, and container hardening best practices.
• Direct experience mapping application and cloud native controls to frameworks such as NIST CSF, NIST 800-53, ISO 27001, SOC2, CIS Benchmarks, MITRE ATT&CK or similar frameworks.
• Strong working knowledge of CI/CD platforms, DevOps toolchain and secure pipeline practices, including building security, artifact management, secrets protection, and code signing.
• Experience working directly with development teams to explain security findings, recommend practical remediation and validation fixes.
• Hands-on experience securing AWS cloud environments, including strong understanding of IAM, networking, logging, monitoring, encryption, workload security, and cloud security posture management.
• Experience with infrastructure-as-code and policy-as-code practices using tools such as Terraform, Helm, CloudFormation, Rego/OPA or similar technologies.
• Strong written and verbal communication skills, with the ability to translate complex technical risks into clear recommendations for developers, architects, leadership and governance stakeholders.
• Security certifications such as CISSP, AWS certified Security-specialty, CISA, GWEB or similar credentials are preferred.

Qualification And Education:

• CISSP Certified Information Systems Security Professional Upon Hire.
• CISM - Certified Information Security Manager Upon Hire.
• Certified Ethical Hacker (CEH) Upon Hire.
• Certified Information Systems Auditor (CISA) Upon Hire.