Cybersecurity Engineer - Top Secret/SCI

Location: Bethesda, MD

Category: Cybersecurity Engineer 

Travel Required: No

Remote Type: Hybrid

Clearance: Top Secret/SCI

Sunayu, LLC has an exciting opening for you, our next Cyber Security Engineer to have an impact as part of a mission focused, solutions oriented, and adaptive team that values innovation, collaboration, and professional development.  As a Cyber Security Engineer, your job is to provide technical security expertise in our cloud and on-premises infrastructure. You will lean on your experience with security technologies and industry best practices while employing effective security solutions. This exciting and challenging work will help you expand your capabilities in security and will provide you with the skills and experience you need to achieve additional levels of the DoD 8570 IAT and IASAE Certifications.  

While most work is conducted on-site at our client location in Bethesda, MD, we offer a flexible schedule and, occasionally, some tasks may be performed remotely. Percentage of remote work will vary based on client requirements/deliverables.

In this role, you will collaborate closely with ISSOs. ISSSMs, software engineers, software developers, system engineers and Government counterparts to perform the full spectrum of systems and cyber security engineering tasks to ensure our systems meet a variety of regulatory compliance frameworks. 

Key Tasks include the following:

Perform review and analysis of cybersecurity event logs
Conduct and review technical cybersecurity assessments
Coordinate with security personnel and recommend mitigation strategies
Identify points of vulnerability and non-compliance with established cybersecurity standards and regulations
Collaborate with our DevOpsSec team to help with analyzing scan results and remediation of findings
Manage and maintain a library of security audit tools, and corresponding processes that can be used for system security testing, internal audits, incident response, and diagnosis of security-related system issues
Perform and maintain vulnerability scans using Assured Compliance Assessment Solution (ACAS) and create reports
Track and report Information Assurance Vulnerability Management (IAVM) compliance using Assured Compliance Assessment Solution (ACAS)
Maintain Authorization to Operate (ATO) records in XACTA system
Manage and report Plan of Actions and Milestones (POA&M) compliance
Review certification and accreditation (C&A) documentation, providing feedback on completeness and compliance of its content
Perform system installation, configuration maintenance, account maintenance, signature maintenance, patch management, and troubleshooting of operational IA and CND systems
Apply system security engineering expertise in one or more of the following to : system security design process; engineering life cycle; information domain; cross domain solutions; commercial off the-shelf and government off-the shelf cryptography; identification; authentication; and authorization; system integration; risk management; intrusion detection; contingency planning; incident handling; configuration control; change management; auditing;

Basic Qualifications

BS degree and 8+ years of experience or additional years of experience in lieu of degree
An active TS/SCI clearance with ability to obtain a Poly
At least one DoD 8570.01-M IAT Level II or higher certification e.g., CCNA Security, CySA+, Security+ CE, SSCP, CISSP (or Associate)
1 year of experience developing and reviewing security concept of operations, systems security plans, security risk assessments, contingency plans, configuration management plans
Experience configuring, running, and analyzing vulnerability scans
Experience with XACTA, EMass, or similar tool
Experience with NIST Special Publications e.g. NIST SP 800-27, 30, 37, 53, 60
Experience with CNSS publication CNSSI 1253
Experience with incident response plans, plan of actions and milestones, risk management plans, and vulnerability management plans
Strong analytical, communication, problem solving, and interpersonal skills
Experience establishing a System Security Engineering (SSE) management process to integrate security and privacy controls into complex hardware and software systems
You will wow us even more if you have these skills:

Software development/coding experience with programming languages such as Python, Java, and React
Experience with DevOpsSec pipelines and tools
Experience with database systems, search engines, web applications
Experience in a Linux Red Hat and Centos environment
Experience with big data applications
Experience with Jira and Confluence
Experience working in an Agile environment
Experience with NIST SP 800-171

Who We Are 

Sunayu, LLC serves as a premier technology partner to the Defense and Intelligence communities, delivering mission-critical engineering solutions across the nation. Our operations are anchored in a commitment to trust, accountability, and ethical transparency, ensuring the high-performance outcomes necessary to protect our country's most vital interests. 

Culture

Our strength lies in our community: Our team prioritizes collaboration, professional growth, and encourages open communication. At Sunayu, we don't just secure the mission—we grow together.

Career Development

We support and encourage our team members to continue their professional growth by providing company-reimbursed training and continuing education of up to $5,000 per year. We also participate in many industry conferences and events where we share our expertise and experiences.

Pay Rate

Salary range considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/ training, key skills, as well as market and business considerations when extending an offer.

Benefits

3 Medical Plan Options

Dental and Vision 

FSA, DCFSA, HSA

Life/AD&D Insurance

Short-Term & Long-Term Disability 

Employee Assistance Program (EAP)

Training and Educational Assistance

Paid Time Off (PTO)

11 Federal holidays 

401k plan with up to a 6% match (100% immediate vesting) 

Equal Opportunity Employer

Sunayu, LLC is an Equal Opportunity/Affirmative Action Employer.  All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, age, protected veteran status, disability status, marital status, genetic information, medical condition, or any other characteristic protected by law.