Cybersecurity Engineer

Cybersecurity Engineer

Position Summary

KeenLogicis seeking aCybersecurity Engineerto support the Congressional Budget Office (CBO) by designing implementing and maintaining enterprise security controls that enforce Zero Trust principles identity-centric access least privilege enforcement continuous monitoring and threat detection across cloud network endpoint and identity environments. The engineer will support enterprise cybersecurity operations incident response vulnerability management identity and access management cloud security and compliance initiatives while ensuring alignment with federal cybersecurity standards and industry best practices.

Work is primarily performed remotely; however contractor personnel must be available to provide onsite support at the CBO Ford House Office Building in Washington DC as directed by the Fortune 500-level benefits including health dental and vision insurance PTO 401(k) and life insurance.

Required Qualifications

• U.S. Citizen and eligible for a Public Trust clearance

• Bachelors degree in Cybersecurity Information Technology Computer Science or related discipline (or equivalent experience)

• 7 years of experience supporting enterprise cybersecurity operations engineering or security architecture

• Experience implementing and maintaining security controls aligned with NIST SP 800-53

• Experience supporting Zero Trust Architecture initiatives aligned with NIST SP 800-207

• Experience with:

• Identity & Access Management (IAM)

• Multi-Factor Authentication (MFA)

• Role-Based Access Control (RBAC)

• Privileged Access Management (PAM)

• SIEM platforms

• EDR/XDR solutions

• Vulnerability management tools

• Security monitoring and incident response

• Experience securing cloud environments (AWS and/or Azure)

• Experience supporting federal cybersecurity compliance requirements

• Strong analytical troubleshooting and documentation skills

Key Responsibilities

Enterprise Security Operations

• Support implementation operation and optimization of enterprise security platforms and services

• Maintain security controls acrosscloud on-premises and hybrid environments

• Support continuous monitoring and security operations initiatives

• Assist with enterprise security posture improvements

Security Architecture & Compliance

• Implement and maintain security controls aligned with NIST SP 800-53

• Support Zero Trust Architecture initiatives in accordance with NIST SP 800-207

• Participatein risk mitigation continuous monitoring and compliance activities

• Support audit readiness and security assessment efforts

Identity & Access Management (IAM)

• Configure and maintain identity and access management solutions

• Implement and enforce RBAC PAM and MFA controls

• Support authentication and authorization services

• Ensureleast-privilegeaccess principles are consistently applied

Threat Detection & Incident Response

• Monitor and analyze security events and alerts

• Support incident triage investigation containment and remediation activities

• Assist with forensic data collection and analysis

• Perform root cause analysis and corrective action planning

Vulnerability Management & Cloud Security

• Conduct vulnerability assessments and risk analysis

• Coordinate remediation patching and mitigation activities

• Secure AWS Azure and hybrid cloud environments

• Implement secure configuration baselines and hardening standards

• Support segmentation and access control strategies to protect sensitive systems and data

Documentation & Operational Support

• Develop and maintain cybersecurity SOPs policies and procedures

• Maintain security documentation system inventories and configuration records

• Participate in change management activities and security impact assessments

• Collaborate with network cloud application and engineering teams to resolve complex security challenges