Senior Cyber Security Engineer

Reston Consulting Group, Inc. is a federal contracting company that delivers technology solutions supporting critical government missions. The company is seeking a Senior Cyber Security Engineer to design, implement, integrate, and secure enterprise information systems supporting Department of Commerce and Bureau of Industry and Security cybersecurity initiatives. The role includes secure architecture, cloud and on-premises security, DevSecOps integration, vulnerability management, technical leadership, and mentoring in a remote environment.

Responsibilities:

• Design, implement, and maintain secure enterprise architectures supporting federal information systems
• Design and implement security controls for cloud, hybrid, and on-premises environments
• Engineer secure network, application, and infrastructure solutions utilizing Zero Trust and defense-in-depth principles
• Design and implement secure authentication, authorization, encryption, and identity management solutions
• Evaluate emerging cybersecurity technologies and recommend engineering solutions that improve security and operational effectiveness
• Develop and implement technical security solutions that align with federal cybersecurity requirements and mission objectives
• Partner with software developers, DevSecOps engineers, cloud engineers, and infrastructure teams to integrate security throughout the Software Development Lifecycle (SDLC)
• Participate in architecture design reviews to ensure secure application and infrastructure design
• Support secure application deployments and Infrastructure as Code (IaC) initiatives
• Develop automation and scripting solutions that improve security operations and engineering efficiency
• Participate in secure code reviews and technical design sessions
• Perform technical security assessments of applications, systems, and enterprise infrastructure
• Conduct vulnerability analysis and support remediation efforts
• Participate in penetration testing, security testing, and validation activities
• Engineer technical solutions that mitigate identified vulnerabilities
• Analyze emerging cybersecurity threats and implement solutions to reduce organizational risk
• Troubleshoot complex cybersecurity and infrastructure issues
• Develop engineering standards, technical implementation guides, and configuration documentation
• Support cloud security engineering initiatives across AWS, Microsoft Azure, and Google Cloud Platform environments
• Collaborate with engineering teams to modernize enterprise security architecture
• Provide technical leadership and mentoring to junior engineers and project teams

Requirements:

• U.S. Citizenship
• Ability to obtain and maintain a Public Trust clearance
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field. An equivalent combination of education and relevant experience will be considered
• Minimum 10 years of experience designing, implementing, and supporting enterprise cybersecurity solutions
• Experience engineering secure enterprise environments supporting federal agencies or large enterprise organizations
• Experience designing, implementing, and integrating cybersecurity controls into cloud and on-premises environments
• Experience with secure network architectures, operating systems, endpoint protection, firewalls, identity and access management, and Zero Trust security principles
• Experience integrating security into the Software Development Lifecycle (SDLC)
• Experience with one or more scripting or programming languages such as Python, PowerShell, Bash, Java, C#, or similar
• Experience supporting DevSecOps, CI/CD pipelines, or Infrastructure as Code (IaC)
• Strong understanding of: FISMA, NIST Cybersecurity Framework, NIST SP 800-53, Secure system engineering principles
• Experience performing vulnerability analysis, security testing, and implementing technical remediation
• Strong analytical, troubleshooting, and root cause analysis skills
• Excellent written and verbal communication skills with the ability to collaborate effectively across technical and business teams
• Experience supporting Department of Commerce (DOC) or Bureau of Industry and Security (BIS) environments
• Experience engineering secure cloud environments in AWS, Microsoft Azure, or Google Cloud Platform
• Experience with container security technologies such as Docker, Kubernetes, or OpenShift
• Experience with SIEM, EDR, vulnerability management, endpoint protection, or security orchestration platforms
• Experience supporting DevSecOps and Secure SDLC initiatives
• Experience implementing Zero Trust architectures
• Experience working in Agile software development environments