Cybersecurity Engineer

Job title: Cybersecurity Engineer

About the Role Cape Fox Federal Integrators (CFFI) is seeking an experienced Cybersecurity Engineer to support NIGC security operations. This full-time role emphasizes applying security principles and federal guidelines to assess and secure installed systems and networks, with responsibilities spanning security assessments, incident response, and continuous monitoring to protect sensitive information.

What You'll Do

• Apply knowledge and skills of information systems security principles, NIST guidelines, FISMA, CISA, and federal directives to conduct ongoing security assessments of installed systems and networks with a view to recommend corrective actions.
• Perform systems engineering and maintenance activities according to established standards.
• Apply knowledge of networking technologies including LAN, MS Azure, and Wireless management in security solutions implementation and troubleshooting.
• Develop NIGC security operations capabilities by evaluating current strategies and pursuing alignment with best practices.
• Ensure the effective configuration and daily operations of tools that support the NIGC cybersecurity strategy, including SEIM integration, Syslog, Network Detection and Response (NDR), Endpoint Detection and Response (EDR), Firewalls, M365 Cloud security, Defender for Cloud, and CDM capabilities.
• In collaboration with the CISO and Privacy Officer, develop plans, techniques, and measurable objectives to improve cybersecurity and privacy measures that meet NIGC goals for protecting sensitive information.
• Collaborate with other teams on the integration of NIGC Applications and IT services to consider security implications and ensure that NIGC security requirements are met.
• Maintain threat awareness and monitor NIGC information systems for exploits and suspicious activities; analyze aggregated logs and perform regular threat hunting activities.
• Develop Security Orchestration and Automation capabilities; adhere to Continuous Monitoring practices to evaluate the effectiveness of implemented controls and execute proactive threat hunting activities to ensure confidentiality, integrity, and availability of NIGC information systems.
• Develop detection and response configuration policies and execute Incident Response activities per the NIGC incident response plan; develop incident handling procedures.
• Collect security operations performance and NIGC security posture management metrics and prepare threat reports to inform risk management decisions; develop and maintain accurate security operations documentation including SOPs.
• Plan and design security solutions and capabilities that enable the organization to identify, protect, detect, respond, and recover from cyber threats and vulnerabilities.
• Define and develop security requirements using risk assessments, threat modeling, testing, and analysis; develop security integration plans to protect existing infrastructure and to incorporate future solutions; create action plans for policy creation and governance, system hardening, monitoring, incident response, disaster recovery, and emerging cybersecurity threats.
• Utilize security information and event management (SEIM), data loss prevention (DLP), intrusion prevention systems (IPS), and other tools in action plan designs.
• Review current architectures and systems to ensure consistency and compliance with the organization's guidelines, policies, and standards; keep abreast of the latest cyber threat information.
• Typically requires a bachelor's degree.

What We're Looking For

• Bachelor's degree in a related field or equivalent experience.
• Experience applying NIST, FISMA, CISA, and federal directives to security assessments and risk mitigation.
• Strong knowledge of security operations including SIEM, EDR, NDR, firewalls, cloud security (MS 365, Defender for Cloud), and CDM.
• Proficiency with networking technologies (LAN), Azure cloud, and security solutions implementation.
• Experience with incident response, threat hunting, security policy development, and documentation.
• Ability to collaborate across teams (CISO, Privacy Officer) and translate security requirements into actionable plans.
• Willingness to stay current with evolving cyber threats and to design solutions that protect sensitive information.

Compensation & Benefits

• Salary: $145,000.00 - $180,000.00 per year, USD.
• Benefits include company holidays, paid time off, health insurance, dental insurance, vision insurance, life and disability insurance, and 401K with company match.
• Position is contingent upon award and is offered to full-time, benefit-eligible personnel.