Cybersecurity Engineer – Mid

Job not on LinkedIn

🔥 7 minutes ago

⚔️ Virginia – Remote

⚔️ Virginia – Remote

💵 $110k - $120k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 13%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Imagineeer

WebsiteLinkedInAll Job Openings

11 - 50 employees

🏛️ Government

🔒 Cybersecurity

💼 Consulting

Government • Cybersecurity • Consulting

Imagineeer is a mission-focused consultancy that helps U. S. government agencies modernize systems and deploy AI safely. Imagineeer builds shared, scalable, production-ready interoperability layers between policy, data, and operations so agencies can move from pilots to production while maintaining security, compliance, and governance. They offer AI-ready cloud and Zero Trust engineering, legacy system transformation, data intelligence and digital stewardship, cybersecurity including post-quantum security, and mission operations support. They operate ImagineLabs as a co-creation environment for agencies to test workflows with real data and validate governance. Headquartered in Arlington, Virginia, they emphasize leaders with inside federal experience and focus on federal domains like health, defense, homeland security, and transportation.

📋 Description

• Assist in the development and maintenance of security authorization packages • Support the execution of security control assessments (SCA) and prepare associated documentation • Help develop and maintain System Security Plans (SSPs) • Track and manage Plans of Action and Milestones (POA&M) to ensure timely remediation of findings • Participate in security impact analyses for system changes and updates • Support the implementation of security controls and assist with technical remediation efforts • Assist in conducting vulnerability assessments and documenting results • Maintain and update authorization documentation to support ATO and reauthorization efforts • Support continuous monitoring (ConMon) activities to ensure ongoing compliance • Collaborate with system owners, security teams, and stakeholders to support cybersecurity requirements • Assist in developing security policies, procedures, and standard operating procedures (SOPs) • Contribute to Security Assessment Reports (SARs) and other compliance artifacts • Participate in security working groups, meetings, and briefings as needed

🎯 Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field • 4+ years of cybersecurity experience, with a focus on Assessment & Authorization (A&A) processes • 2+ years of direct experience working with NIST RMF and FISMA compliance requirements • Active Security+ certification or equivalent such as SSCP or GSEC • Ability to obtain and maintain a Public Trust clearance • United States citizenship • Strong knowledge of the NIST Risk Management Framework (RMF) and FISMA requirements • Familiarity with NIST 800-53 and related security control catalogs • Understanding of security control assessments and the A&A process lifecycle • Ability to develop, maintain, and review security documentation including SSPs, POA&Ms, and SARs • Familiarity with security assessment and compliance tools such as eMASS, Xacta, and Archer • Knowledge of common security tools and technologies such as Nessus and Qualys • Basic skills in risk assessment and security analysis • Strong technical writing and documentation skills • Good communication skills, both verbal and written • Ability to work independently and as part of a team • Additional certifications such as CASP+, CISSP (Associate), CAP, or CEH are desired • Experience supporting classified systems or sensitive federal systems is desired • Knowledge of Cloud Security principles and familiarity with FedRAMP compliance is desired • Exposure to DevSecOps concepts, automated compliance, and security pipelines is desired • Familiarity with the Cybersecurity Maturity Model Certification (CMMC) framework is desired • Experience with continuous monitoring tools and techniques is desired • Basic understanding of security architecture principles is desired • Awareness of privacy requirements and associated controls is desired • Experience with documentation management systems such as SharePoint and Confluence is desired • Familiarity with agile development methodologies is desired • Prior experience working in or supporting federal government contracts is desired • Understanding of security testing methodologies, vulnerability scanning, and mitigation processes is desired

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume