Cybersecurity Engineer, Lead

Indigo IT is an award-winning information technology consulting and services company supporting government agencies with Cloud, Cybersecurity, Knowledge Management, and Enterprise solutions. The team operates with a mission-first focus and emphasizes urgency in helping customers achieve technology goals. Recognized on the Inc. 5000 list of America’s fastest growing companies (2020, 2021) and named one of the 2022 Best Places to Work in Virginia, Indigo IT offers a collaborative environment within its OIT End-User Device IT Management Services team.

This Cybersecurity Engineer, Lead role is based in Ashburn, VA (hybrid) with a salary range of USD 90,000 - 115,000 per year.

What You’ll Do

In this lead position, you will help secure Windows and MacOS endpoint environments across desktops, laptops, and tablets. You will drive vulnerability and configuration compliance, strengthen security measures, and ensure the organization can produce auditable evidence to support required oversight activities.

• Support execution of the Risk Management Framework, with an emphasis on Continuous Monitoring.
• Participate in and lead, as required, Security Assessment & Authorization (SA&A) activities.
• Perform conformance testing to confirm compliance with system and application baselines.
• Assist with test bed environment work to test and verify hardware and support peripherals, recording and analyzing test data.
• Create auditable evidence of security measures.
• Support Independent Validation and Verification (IV&V) testing for software applications and systems.
• Analyze port, protocol, and network traffic information to support real-time posture decision-making.
• Perform operational security tasks as assigned, including incident handling and analysis, and prepare reports for senior leadership.
• Utilize existing security tools to support RMF continuous monitoring activities.
• Collect and maintain data required for system information assurance reporting, and coordinate information assurance inspections, tests, and reviews for the environment.
• Advise senior leadership or the authorizing official regarding charges affecting the organization’s information assurance posture.
• Support corporate business development by providing subject matter expertise for proposals, white papers, and requests for information.

Required Qualifications

• Current CBP Background Investigation or Top-Secret clearance adjudicated within the last 5 years (preferred).
• At least 5 years of hands-on experience detecting, monitoring, and remediating security issues across network, hardware, software, and platform security.
• Demonstratable experience performing compliance control testing, identifying and resolving cybersecurity issues, and developing remediation or mitigation strategies.
• Bachelor’s or master’s degree in Cybersecurity, Computer Science, Computer Information Systems, or Information Technology (master’s preferred).
• In lieu of a college degree, 10 years of hands-on experience in control testing, vulnerability identification and resolution, and recommendations to minimize cybersecurity risk.
• Must possess one or multiple certifications: ISC2 CISSP, EC-Council Certified Ethical Hacker, or CompTIA Security Analytics Expert (equivalent certifications may be considered).

Skills & Tools

• Windows, MacOS
• Tenable Nessus, Security Center, Tanium
• Splunk or other SEIM (Security Information and Event Management)
• STIGs, GPO/Group Policy
• CISA KEV list implementation deadlines
• ISVM, security patching and vulnerability/configuration compliance, including GPO/Group Policy
• Operations-based testing scenarios

Indigo IT Benefits

• Medical, Dental, and Vision coverage options
• 401(k) with company match
• Group life and disability
• Flex Spending Accounts (FSA)
• Paid Time Off (PTO) and paid holidays
• Education assistance
• In-house training programs for employees
• Bonuses and recognition for publishing, speaking, and innovative thought leadership