Senior Cybersecurity Engineer

Dexian Government Solutions is recruiting for a Senior Cybersecurity Engineer to support our proposal effort for the DHS CIETS in DC Metro area.

Position Overview:

The Senior Cybersecurity Engineer provides the overall technical direction in all task areas involving cybersecurity, cloud engineering, agile DevSecOps, AI/ML and Zero Trust activities. This engineer shall be knowledgeable about Federal, DHS, and IC cybersecurity architectures, standards, and technologies, as well as emerging cybersecurity practices, and experienced in translating them into technical plans and overseeing the execution of those plans.

Job Duties:

The Senior Cybersecurity Engineer provides expert-level cybersecurity engineering support for:

• Enterprise architecture reviews
• Security design and implementation
• Cloud security engineering
• Zero Trust initiatives
• Security control implementation
• System modernization efforts
• Technical risk analysis
• Cybersecurity tool integration
• Security architecture governance
• The position serves as the principal technical authority supporting cybersecurity engineering activities across the DHS I&A environment.

Core Responsibilities:

Security Architecture and Engineering

The engineer shall:

• Design, review, and evaluate cybersecurity architectures for enterprise systems and applications.
• Evaluate proposed technologies and system architectures for compliance with DHS and Intelligence Community security requirements.
• Perform security engineering assessments during system development, enhancement, and modernization initiatives.
• Provide technical recommendations regarding secure system design and implementation.

Security Control Implementation

The engineer shall:

• Support implementation and validation of NIST, CNSSI, and Intelligence Community security controls.
• Evaluate technical implementations supporting RMF authorization efforts.
• Assist system owners and ISSOs in implementing security requirements and remediation plans.
• Assess effectiveness of implemented technical controls.

Cloud Security Engineering

The engineer shall:

• Support cybersecurity requirements for cloud-hosted systems and services.
• Evaluate cloud security architectures and inherited control implementations.
• Support authorization efforts for cloud environments, including GovCloud and other enterprise cloud platforms.
• Develop technical recommendations to improve cloud security posture.

Vulnerability and Risk Analysis

The engineer shall:

• Analyze cybersecurity vulnerabilities and technical risks affecting DHS I&A systems.
• Review vulnerability scan results and remediation strategies.
• Recommend technical mitigations and compensating controls.
• Support cybersecurity risk assessments and engineering reviews.

Security Tool Administration and Integration

The engineer shall:

• Support implementation and administration of cybersecurity technologies and security services.
• Evaluate and integrate new cybersecurity capabilities.
• Support enterprise security monitoring and technical cybersecurity operations.
• Assist with security automation and modernization initiatives.

Engineering Support to RMF and A&A

The engineer shall:

• Provide engineering expertise supporting ATO and authorization package development.
• Validate implementation of security controls documented in RMF artifacts.
• Support ISSOs, ISSMs, and SCAs during authorization assessments.
• Assist in resolving technical findings and authorization issues.

Stakeholder Interaction

The Senior Cybersecurity Engineer routinely interfa