Mid-Grade Cybersecurity Engineer - TS SCI w/ Poly Required

Work you'll do:

This role involves designing, implementing, and maintaining security measures to protect sensitive information. A Mid-Grade Cybersecurity Engineer is responsible for designing, implementing, and managing the organization’s cybersecurity measures to protect information systems and networks. This role involves a deeper engagement in security architecture, threat analysis, and incident response, requiring a solid foundation of experience and technical expertise. 

• Develop and implement security architectures and frameworks for new and existing systems.
• Ensure that security controls are integrated into the design and implementation of systems and applications.
• Conduct thorough analysis of security threats and vulnerabilities.
• Lead incident response efforts, including investigation, containment, remediation, and reporting.
• Develop and refine incident response plans and playbooks.
• Manage and optimize security tools and technologies (e.g., SIEM, firewalls, IDS/IPS, endpoint protection).
• Evaluate and recommend new security tools and technologies to enhance the organization’s security posture.
• Ensure compliance with relevant security standards and regulations (e.g., ISO 27001, NIST, GDPR).
• Conduct risk assessments and develop risk mitigation strategies.
• Prepare and maintain documentation for compliance audits and assessments.

The Team

Deloitte’s Government & Public Services (GPS) practice – our people, ideas, technology and outcomes – is designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise.

Our Cyber Defense & Resilience offering assists clients in defending against advanced threats by transforming security operations, monitoring technology, data analytics, and threat intelligence. Helps manage and protect dynamic attack surfaces and provides rapid crisis and cyber incident response, ensuring clients can be ready for, respond to, and recover from business disruptions. The Project Delivery Talent Model is designed for professionals with specialized skills that align to a current client need. Team members focus on delivering services to clients, without additional expectations related to business development or promotion. Their employment is tied to their role on a project, and they are eligible for a benefits package that is competitive for project delivery-focused professionals.

Qualifications

Required: 

• Bachelor’s degree required.
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future
• Active TS/SCI with Polygraph security clearance required.
• Must be able to work full time on-site in Virginia.
• 3+ years of experience in cybersecurity or a related field.
• 3+ years of experience within the following: 
• Proven experience in security architecture, threat analysis, and incident response.
• In-depth knowledge of cybersecurity principles and practices.
• Proficiency with security tools and technologies (e.g., SIEM, firewalls, IDS/IPS, endpoint protection).
• Understanding of network protocols, operating systems (Windows, Linux), and cloud security.
• Experience conducting technical risk assessments and providing technical risk mitigation guidance on the use of various enabling technologies.  
• Knowledge of network management systems, network storage, backup systems, and disaster recovery (DR) architectures.
• Demonstrated experience with transitioning security domains and use of cross domain appliances.
• Demonstrated experience creating concise and well-structured analysis and vulnerability assessments.