Cybersecurity Engineer
Ashburn, VA (hybrid)
SUMMARY:
Founded in 2001, Indigo IT is an award-winning information technology consulting and services company. We are a trusted services provider to government agencies seeking innovative Cloud, Cybersecurity, Knowledge Management, and Enterprise solutions. We know our defense, federal, and civilian customers have critical IT infrastructures that must remain reliable, available, and maximized. Indigo IT is mission focused and committed to maintaining a sense of urgency in anticipating and supporting our customers' technology goals and objectives. Our unique ability to think beyond today allows our clients to stay ahead of their IT challenges. Recognized on the Inc. 5000 list of America's fastest growing companies in 2020, 2021, and named as one of the 2022 Best Places to Work in Virginia, we are always looking to hire top talent in the field - come join us today!
As an integral member of the OIT End-User Device IT Management Services team, the Cybersecurity Engineer II will be responsible for ensuring vulnerability and configuration compliance of programs, applications, updates, and security patches throughout the enterprise of Windows and MacOS desktops, laptops, and tablets. Additionally, the Cybersecurity Engineer II will provide Tier III/IV support to end users through the effective use and management of the enterprise ticket management system to provide expedient resolution to trouble tickets, service requests, break fixes, and change requests. This team member will assist with developing security measures for the protection of data, systems, and networks. Investigate and respond to vulnerability and compliance issues. Develop SOPs to ensure good and sound IT practices during the building/testing/deployment/analysis of software packages in the environment.
ESSENTIAL FUNCTIONS/RESPONSIBILITIES:
- Supports the execution of the Risk Management Framework (All facets, especially Continuous Monitoring).
- Completes required Security Assessment & Authorization (SA&A) activities.
- Determines level of assurance of developed capabilities based on developed test plans and results.
- Perform conformance testing to assess whether a system complies with defined specifications or standards (system and application baselines).
- Perform developmental testing on systems being concurrently developed.
- Perform interoperability testing on systems exchanging electronic information with systems of other organizations.
- Perform operational testing to evaluate systems in an operational environment.
- Develop test bed environment to test and verify hardware and support peripherals to ensure that they meet specifications and requirements by recording and analyzing test data.
- Create auditable evidence of security measures.
- Conduct and monitor Independent Validation and Verification (IV&V) testing for software applications and systems.
- Advise appropriate senior leadership or authorizing official of charges affecting the organization's information assurance posture.
- Collect and maintain data needed to meet system information assurance reporting.
- Ensure that information assurance inspections, tests, and reviews are coordinated for the network environment.
- Perform operational security tasks to include incident handling and analysis and prepare appropriate reports to keep senior leadership informed.
- Utilize existing security tools in place to perform RMF continuous monitoring activities
- Ability to analyze port, protocols and network traffic information to make intelligent decisions regarding the real-time information security posture of the organization.
- Ensure that information assurance requirements are integrated into the continuity planning for that system and/or organization(s).
- Support corporate business development by providing subject matter expertise in the development of proposals, white papers, and requests for information.
SPECIFIC KNOWLEDGE, SKILLS, & ABILITIES:
- Information Certification & Accreditation Regulations, Federal Information Security Management Act (FISMA), and National Institute of Standards and Technology (NIST) guidance.
- Intrusion and malware detection using host-based and network-based intrusion detection systems (IDS) and log management applications.
- Identifying, collecting, processing, documenting, reporting, cyber security/incident response events.
- Architecting, engineering, developing and implementing cyber security/incident response policies and procedures; engineering, testing, installing, patching, and upgrading various information security hardware and software applications
- Information system security, cyber security, computer forensics, vulnerability assessment and penetration testing, malware analysis, insider threat.
- Zero Trust Implementation
- Experience with Tenable, Nessus, Security Center, Tanium (not required, but nice to have).
- Experience with ISVM, Security Patch/Patches, Vulnerabilities, Configuration (STIGs), and GPO/Group Policy.
- Skill in conducting and analyzing the results of test events including utilizing in-depth knowledge of TCP/IP ports and protocols to provide accurate, concise, and complete results to senior leadership.
- Skill in designing a security focused data analysis structure (i.e., the types of data your test must generate and how to analyze those data).
- Skill in determining an appropriate level of test rigor for a given system.
- Skill in developing operations-based testing scenarios.
- Ability to recommend improvements to the internal processes to maximize customer service levels and improve overall security posture of the organization.
DESIRED EDUCATION, EXPERIENCE, & CERTIFICATIONS:
- Bachelor's degree in computer science, Information Systems, or related (work experience in IT field, military operations, and/or certifications may be considered in lieu of education).
- Current CBP Background Investigation or Top Secret clearance adjudicated within the last 5 years (preferred)
- Relevant Certifications: Security+, Network+, MDA, Azure, and/or Intune are desired
- Exposure to Cloud Endpoint Management (Microsoft Entra ID, Microsoft Intune, Adobe Cloud, Beyond Trust, etc.)
- Exposure to PowerShell, Power Automate, PowerBI or SQL to automate processes and provide reports
- Exposure to configuring and supporting a Zero Trust system
- 5+ years of experience providing IT administration services in support of a mid to large scale enterprise desktop system environment.
At Indigo IT, we offer an expansive benefits package for our employees, which includes: Medical, Dental, and Vision coverage options. In addition, we offer 401(k) with company match, Group life and disability, Flex Spending Accounts (FSA), Paid Time Off (PTO), Paid holidays, and Education assistance. We also have in house training programs for employees, we reward thought leadership with bonuses and recognition for publishing, speaking, and innovative thought leadership in our industry.
Indigo IT is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. This employer uses E-Verify.
|
Indigo IT, LLC
paid time off, paid holidays, 401(k)
Mar 26, 2026