Zachary Piper Solutions is seeking a Cybersecurity Engineer to join a Contract-to-Hire job opportunity in Arlington, VA. This is an onsite position that offers conversion to a hybrid schedule (3 days onsite) once comfortable in the role. The Cybersecurity Engineer will be responsible for securing our customers cloud computing, data center, and on-premise environments.

MUST BE PUBLIC TRUST ELIGIBLE

Responsibilities of the Cybersecurity Engineer:
• Set up, operate, and manage/maintain a variety of security solutions including vulnerability management, endpoint security, security information and event management, and governance/risk/compliance.
• Develop and maintain security policy and procedures, perform incident response and business continuity testing, work with the NIST Cybersecurity Framework and CIS Benchmarks, and assist with security audits as needed.
• Act as point of contact responsible for the planning, development, testing, and implementation of IT security controls.
• Install, configure, and update firewalls, data encryption, and other security products to facilitate a secure posture.
• Perform threat intelligence analysis and penetration testing.

Qualifications for the Cybersecurity Engineer:

• 7+ years of industry experience in an Information Security function.

• Experience with Palo Alto (preferred) or Cisco firewall, network security appliance administration and cloud security.
• Experience with vulnerability scanners and management, preferably Tenable Nessus and Qualys, managing POAMs and Risk Acceptance Memos.
• Possess fundamental knowledge of Windows and Linux (RHEL) operating systems, and the ability to analyze network traffic and security events.
• Demonstrated experience with RMF, A&A, IV&V, and continuous monitoring
• AWS, Azure experience strongly preferred

Compensation for the Incident Response Analyst:

• Salary Range: $125,000 - $145,000 depending on experiences & non-negotiable above this range
• Full Benefits: Cigna Medical, Dental, Vision, 401K, etc.

Firewall, Penetration testing, threat hunting, CISSP, CISA, PCNSE, AWS, Azure, Risk, Server, Architecture, storage, solutions, desktop hardware, Software, incident response, artifacts, ATO, FISMA, FISCAM, Splunk, CIS Benchmark, DISA STIG, NIST 800-53, RMF, A&A, IV&V, RHEL, Network traffic, POAMs, Risk Acceptance Memos, Tenable Nessus, Qualys, vulnerability scanners, UBA, burp suite, data encryption, Washington DC, Arlington, Alexandria, Ashburn, Silver Spring, Falls Church, Vienna, McLean, Bethesda,