Senior Cybersecurity Engineer

About the role

Pemcco is seeking a highly skilled Senior Cybersecurity Engineer to join our dynamic team in Washington, District of Columbia. This role is pivotal in safeguarding our digital assets and ensuring the integrity of our systems against evolving cyber threats. The ideal candidate will possess a strong background in cybersecurity practices, with a focus on risk assessment, incident response, and security architecture. You will collaborate with various teams to implement robust security measures and enhance our overall security posture.

Key facts

What you'll do

• Design and implement comprehensive security architectures to protect sensitive data and systems from unauthorized access and cyber threats.
• Conduct thorough risk assessments and vulnerability analyses to identify potential security weaknesses and recommend appropriate mitigation strategies.
• Lead incident response efforts, including the investigation of security breaches, coordination of recovery efforts, and communication with stakeholders.
• Develop and maintain security policies, procedures, and standards that align with industry best practices and regulatory requirements.
• Collaborate with IT and development teams to integrate security measures into the software development lifecycle, ensuring secure coding practices are followed.
• Monitor security alerts and logs to detect and respond to potential threats in real-time, utilizing advanced security tools and technologies.
• Provide training and awareness programs for employees to promote a culture of security and ensure adherence to security protocols.
• Stay informed about the latest cybersecurity trends, threats, and technologies, and apply this knowledge to enhance Pemcco's security strategies.
• Work closely with external partners and vendors to evaluate and implement security solutions that meet organizational needs.
• Prepare detailed reports and presentations on security incidents, vulnerabilities, and compliance status for senior management and stakeholders.
• Participate in security audits and assessments to ensure compliance with internal policies and external regulations.
• Mentor junior cybersecurity staff, providing guidance and support in their professional development.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• A minimum of 5 years of experience in cybersecurity, with a focus on security engineering and incident response.
• Strong knowledge of security frameworks and standards such as NIST, ISO 27001, and CIS Controls.
• Proficiency in security technologies, including firewalls, intrusion detection/prevention systems, and endpoint protection solutions.
• Experience with cloud security practices and tools, particularly in AWS or Azure environments.
• Familiarity with programming and scripting languages such as Python, Java, or PowerShell for automation and security tool development.
• Excellent analytical and problem-solving skills, with the ability to think critically under pressure.
• Strong communication skills, both verbal and written, to effectively convey complex security concepts to technical and non-technical audiences.
• Relevant certifications such as CISSP, CISM, or CEH are highly desirable.

Nice to have

• Experience with security compliance frameworks such as PCI-DSS, HIPAA, or GDPR.
• Knowledge of threat intelligence platforms and methodologies for proactive threat hunting.
• Familiarity with DevSecOps practices and tools for integrating security into CI/CD pipelines.
• Experience in conducting penetration testing and security assessments.
• Understanding of network protocols and security technologies such as VPNs, SSL/TLS, and encryption methods.

Skills & tools

• Proficient in using security information and event management (SIEM) tools for threat detection and response.
• Familiarity with vulnerability management tools and methodologies to assess and remediate security weaknesses.
• Experience with endpoint detection and response (EDR) solutions to monitor and protect endpoints.
• Knowledge of identity and access management (IAM) solutions to ensure proper user authentication and authorization.
• Understanding of secure coding practices and application security testing tools.

Practical notes

• This position is based in Washington, D.C., and may require occasional travel for training or conferences.
• The role may involve on-call responsibilities to respond to security incidents outside of regular business hours.
• Candidates must be eligible to work in the United States and may require a background check as part of the hiring process.

Join Pemcco and be part of a dedicated team that is committed to securing our digital landscape. If you are passionate about cybersecurity and eager to make a significant impact, we encourage you to apply for the Senior Cybersecurity Engineer position today!