Cybersecurity Engineer

Description
Hybrid (on-site work) as needed in Washington, DC
Our client seeks a seasoned cybersecurity professional to lead assessments, implement and manage controls, and guide incident response for an enterprise environment. The role will evaluate and strengthen security posture across networks, endpoints, and cloud, while producing clear reporting and collaborating with stakeholders to mitigate risk.
This is a contract-to-hire opportunity. Applicants must be willing and able to work on a w2 basis and convert to FTE following contract duration. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.
Rate: $65.00 to $70.00/hr. w2
Responsibilities

• Perform vulnerability assessments using tools and techniques including network scanning, code reviews, and penetration testing to identify and document weaknesses.
• Analyze security logs to identify suspicious activity and generate comprehensive reports with risks and remediation recommendations.
• Design, deploy, configure, and manage security controls: firewalls, IDS/IPS, EDR, ZTS, SIEM, and DLP.
• Monitor alerts and anomalies, investigate incidents, and respond to breaches effectively.
• Administer security access controls for authentication, authorization, and access rights.
• Implement and maintain security policies, procedures, and standards.
• Develop and maintain incident response plans; conduct investigations, evidence collection, and forensics to determine root causes.
• Research emerging threats, vulnerabilities, and attack vectors; evaluate and recommend new security technologies.

Experience Requirements

• Minimum 7 years of professional experience in cybersecurity or related fields such as systems administration or network engineering.
• Hands-on experience with firewalls, IDS/IPS, EDR, ZTS, DLP, SIEM, and vulnerability assessment solutions.
• Knowledge of cybersecurity principles, attack vectors, security frameworks such as NIST CSF and ISO 27001, and regulatory requirements including GDPR and HIPAA.
• Proficiency in network security concepts, protocols such as TCP/IP, UDP, DNS, and common network devices.
• Technical expertise with scripting languages such as Python or PowerShell, CLI, and operating systems including Windows, Linux, and macOS.
• Analytical and problem-solving skills with the ability to identify root causes and develop effective solutions.
• Clear communication skills for technical and non-technical audiences.
• Strong attention to detail and organizational skills with the ability to manage priorities independently.
• At least one current or lapsed certification with agreement to recertify within 3 months: CompTIA Security+, Microsoft Azure Security Technologies, Zscaler, CrowdStrike, Splunk, CEH, CISSP, or GIAC (e.g., GCIH, GPEN, GCIA).

Education Requirements

• Bachelor's degree in Computer Science, Information Technology, or related field preferred.
• Clearance requirement: Ability to obtain and maintain a Public Trust.