Cyber Security Engineer II

ATTAINX INC is seeking a Cyber Security Engineer II to help secure and sustain the CISA DocuSign environment. In this role, you will support continuous monitoring, vulnerability remediation, security authorization activities, and controlled operational changes for critical SaaS systems used by the organization.

This position is remote/hybrid based in Herndon, VA, with potential attendance at DHS CISA facilities depending on clearance and operational needs. The work requires maintaining applicable DHS/CISA clearance and fitness determination.

What you will do

• Operate and secure DocuSign eSignature, Admin, Monitor, and related modules while maintaining integrations with enterprise identity and collaboration platforms.
• Perform preventive, corrective, and perfective maintenance, and execute approved change and patch management, including emergency fixes and vulnerability remediation.
• Monitor performance and forward security logs through DocuSign Monitor; maintain dashboards, alerts, and supporting evidence for compliance.
• Maintain POA&M documentation and remediation tracking, supporting alignment with Technical Reference Model efforts and data loss prevention plans.
• Support secure data ingestion workflows, feature enablement, module activation, and operational readiness activities.
• Coordinate cutover and help desk readiness with CISA’s Technology Operations Center, including Tier 1 support knowledge transfer.
• Assist in establishing service level agreements, alerting procedures, and advisories with the Technology Operations Center.
• Maintain security and administrative SOPs, concepts of operations, governance artifacts, and user guidance, and support training, security authorization, and continuous improvement.

Minimum qualifications

• Obtain and maintain a favorable DHS/CISA Entry on Duty or fitness determination, including completing the background investigation required for the position’s sensitivity and access needs.
• Be authorized to work in the United States and meet DHS/CISA personnel and system access requirements.
• Be a US Citizen able to obtain a DHS CISA DocuSign Public Trust clearance.
• Have 3-5 years of related cybersecurity or security engineering experience, including at least 2 years supporting cloud or SaaS security operations.
• Preferred: a bachelor’s degree in cybersecurity, computer science, information systems, engineering, or a related field (equivalent education, training, and relevant experience will be considered).
• Experience with vulnerability remediation, patch and change management, security logging, alerting, and incident response coordination.
• Experience applying NIST SP 800-53 controls and maintaining security authorization evidence, continuous monitoring records, and Plans of Action and Milestones (POA&Ms).
• Knowledge of enterprise identity integration, role-based access, data loss prevention, and secure SaaS configuration.
• Experience creating operational procedures, security dashboards, and technical documentation; DocuSign administration or monitoring experience is preferred.
• Highly preferred: a current ISC2 CISSP or ISC2 CCSP certification.

Technologies you will work with

• DocuSign (eSignature, Admin, Monitor)
• NIST SP 800-53
• Plans of Action and Milestones (POA&Ms)
• Data loss prevention
• Role-based access
• Enterprise identity integration
• ISC2 CISSP, ISC2 CCSP
• Technical Reference Model

Schedule and logistics

• Location: Remote/Hybrid - DHS CISA; Government facility attendance may be required.
• Work schedule: Monday through Friday, 8:00 a.m. to 5:00 p.m. Eastern Time; core availability 9:00 a.m. to 3:00 p.m., excluding federal holidays.
• Work authorization: Must be authorized to work in the United States and meet DHS/CISA personnel and system access requirements.

Compensation and benefits

• Salary: USD 115,000 - 128,000 per year
• Paid vacation
• Medical, dental, and vision insurance
• Matching 401(k) plan
• Tuition/training reimbursement
• Long- and short-term disability coverage

Work environment

• Primarily remote work at an approved location with reliable connectivity, a secure workspace, and proper protection of Government equipment and sensitive information.
• Government facility attendance may be required, and remote work is subject to DHS and CISA approval.
• Office noise is generally moderate.
• Occasional work outside normal hours, including weekends and holidays, may be required for crisis response or critical IT issues.