Cyber Security Engineer

Job not on LinkedIn

🔥 58 minutes ago

⚔️ Virginia – Remote

⚔️ Virginia – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

PUNCH Cyber Analytics Group

WebsiteLinkedInAll Job Openings

11 - 50 employees

💼 Consulting

🎖️ Defense

🔒 Cybersecurity

Consulting • Defense • Cybersecurity

PUNCH Cyber Analytics Group is a cyber-consulting firm that specializes in advanced analytics and providing strategic support to both government and commercial clients. The company focuses on improving organizational awareness and capability to manage increasing cyber threats. Key services include Security Operations, Threat Intelligence, Incident Response, and Threat Hunting. PUNCH provides custom tool development and supports Security Operations Center analysts from conceptualization to optimization. With a background of monitoring and preventing significant global cyber threats, their services extend to technical analysis and Research & Development in scalable cyber data analysis. They have been awarded a U. S. General Services Administration Schedule 70 contract, facilitating services across federal agencies.

📋 Description

• Define and maintain the organization’s Zero Trust security architecture and strategy aligned with business and security objectives • Provide recommendations regarding the Agency's perimeter UTM devices in accordance with NIST 800-53 and industry best practices for Cisco, Juniper, Riverbed, and Fortinet • Develop Zero Trust roadmaps, maturity models, and implementation plans across people, processes, applications, data, devices, and infrastructure • Establish identity-centric security controls, including strong authentication, MFA, SSO, identity governance, and least-privilege access • Design network segmentation and micro-segmentation to limit lateral movement and reduce attack surfaces • Implement continuous verification of users, devices, workloads, applications, and network connections • Define policy-based access controls using identity, device posture, risk, location, application, and behavioral signals • Establish device trust and endpoint security requirements, including device compliance, health checks, encryption, patching, and EDR coverage • Develop data-centric security controls, including data classification, encryption, DLP, access governance, and rights management • Define security telemetry and continuous monitoring requirements to support real-time risk-based access decisions • Integrate Zero Trust controls with cloud, hybrid-cloud, SaaS, on-premises, and multi-cloud environments • Assess existing infrastructure against Zero Trust maturity frameworks and reference architectures, such as NIST Zero Trust Architecture • Identify security gaps, vulnerabilities, architectural risks, and legacy dependencies that prevent Zero Trust adoption • Create architecture standards, patterns, reference designs, and security requirements for engineering and project teams • Continuously evolve the architecture based on new threats, technologies, business requirements, and emerging Zero Trust capabilities

🎯 Requirements

• 7 years of experience with a bachelor’s degree or 9 years of total experience • Ability to work in both an individual and team environment • Flexibility to support after hours maintenance activities • Must be able to obtain a Position of Public Trust • Experience or knowledge of Zero Trust security architecture and strategy • Knowledge of NIST 800-53 and industry best practices • Knowledge of Cisco, Juniper, Riverbed, and Fortinet devices • Ability to develop Zero Trust roadmaps, maturity models, and implementation plans • Knowledge of identity-centric security controls, MFA, SSO, identity governance, and least-privilege access • Knowledge of network segmentation and micro-segmentation • Knowledge of continuous verification and policy-based access controls • Knowledge of endpoint security, device compliance, encryption, patching, and EDR • Knowledge of data classification, encryption, DLP, access governance, and rights management • Knowledge of security telemetry and continuous monitoring • Experience with cloud, hybrid-cloud, SaaS, on-premises, and multi-cloud environments • Knowledge of NIST Zero Trust Architecture and related maturity frameworks • Ability to identify security gaps, vulnerabilities, architectural risks, and legacy dependencies

🏖️ Benefits

• Unique benefits and personal touches to provide a positive work-life experience • Inc. Magazine ‘Best Workplaces’ award recognition