POSITION SUMMARY
We are seeking a Cyber Engineer to support the implementation, operation, and continuous improvement of cybersecurity capabilities for a federal IT program. This role performs vulnerability management, security monitoring, incident response support, and compliance activities within a FISMA-regulated environment following NIST frameworks.
KEY RESPONSIBILITIES
- Operate and manage vulnerability scanning tools (Tenable.sc / Nessus, Qualys) — conduct scans, analyze results, prioritize findings, and track remediation through closure
- Monitor security events and alerts using SIEM platforms (Splunk, Microsoft Sentinel); investigate anomalies and escalate confirmed incidents per the IR plan
- Support the ATO process: contribute to System Security Plans (SSPs), Security Assessment Reports (SARs), and POA&M management
- Assess and document compliance with NIST SP 800-53 security controls; assist with continuous monitoring activities and ConMon reporting
- Perform security configuration reviews against DISA STIGs and CIS Benchmarks; document findings and work with system owners on remediation
- Support implementation and tuning of security tools: IDS/IPS, DLP, endpoint detection and response (EDR), and multi-factor authentication solutions
- Contribute to threat intelligence analysis and security awareness activities; assist with tabletop exercises and incident response drills
REQUIRED QUALIFICATIONS
- Bachelor's degree in Cybersecurity, Information Technology, or related field
- 4+ years of cybersecurity engineering experience in a federal or regulated IT environment
- Hands-on experience with vulnerability scanning tools (Tenable.sc or Qualys) and SIEM platforms (Splunk preferred)
- Working knowledge of NIST SP 800-53, NIST SP 800-37 (RMF), and FISMA compliance requirements
- Experience contributing to ATO packages and supporting security assessments
- CompTIA Security+ certification (DoD 8570.01-M compliant)
Clearance: Must be eligible to obtain and maintain a federal Public Trust background investigation (MBI or HBI). U.S. citizenship or permanent residency required.
PREFERRED QUALIFICATIONS
- CEH, CASP+, or CISSP certification
- Experience with CDM tools: BigFix, Axonius, or Tenable.sc in a federal dashboard environment
- Familiarity with Zero Trust architecture principles and NIST SP 800-207
- Experience supporting security operations at NIH, HHS, or similar federal research agencies
BENEFITS
Avyanna LLC offers a competitive salary and comprehensive benefits package including health, dental, vision, 401(k), paid time off, and professional development support.
Avyanna LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or veteran status.