Cybersecurity Engineering Lead

Invictus International Consulting, LLC is seeking a Cybersecurity Engineering Lead to act as the senior technical authority on an enterprise cybersecurity program supporting the NRO. This onsite role in Chantilly, VA focuses on system architecture, technical strategy, engineering standards, and end-to-end integration across the system lifecycle.

Responsibilities

• Set technical direction and engineering standards across the enterprise cybersecurity service portfolio, including SIEM and cyber data platforms, host-based security, perimeter protection, and vulnerability scanning
• Own architecture and integration approach to advance customer Zero Trust Architecture goals
• Lead design, integration, and deployment of new and upgraded cybersecurity capabilities, including SIEM/SOAR integration and detection engineering for real-time alerting and threat hunting
• Guide engineering through configuration management and change control, maintaining accurate technical documentation and diagrams
• Support security accreditation (RMF) activities required to obtain and maintain an Authority to Operate
• Evaluate emerging technologies, standards, and practices, and recommend improvements to increase efficiency
• Conduct technical investigations and root cause analysis on recurring issues and recommend corrective changes
• Coordinate engineering interfaces with other service providers, SETA, and FFRDC partners

Key Focus Areas and Tools

• SIEM/SOAR integration and detection engineering
• Identity, credential and access management (ICAM/PKI)
• Cross domain solutions, cloud security services, and automated security validation
• Security operations aligned to MITRE ATT&CK and enterprise security frameworks

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, IT, or related STEM field, plus one of the following: CISSP, CISM, CCISO, GCDA, Security+ CE, CySA+, or equivalent
• 5+ years of cybersecurity, SOC, or cyber incident response experience
• 5+ years of detection engineering and automation experience
• Qualified for a DoD 8140 Category E role (Cyber Workforce Developer 751, Manager or Executive Cyber Leader 901, or IAM Level III)
• Active TS/SCI with CI polygraph

Technologies

• SIEM, cyber data platforms
• Host-based security, perimeter protection, vulnerability scanning
• ICAM/PKI, cross domain solutions
• Cloud security services, automated security validation
• Zero Trust Architecture
• SIEM/SOAR integration, detection engineering
• RMF, Authority to Operate
• Splunk, SOAR platforms, HBSS/endpoint security
• AWS, Azure
• MITRE ATT&CK
• ITIL, COBIT, ISO, Agile

Compensation and Location

• Location: Chantilly, VA (onsite)
• Salary: USD 200,000 - 220,000 per year

Desired Qualifications

• Experience within the NRO and its mission partner community
• Advanced degree and certifications in IT process improvement or capability frameworks (for example: ITIL, COBIT, ISO, CISSP, Agile)
• Experience architecting enterprise security tools such as Splunk, SOAR platforms, HBSS/endpoint security, and cross domain solutions
• Experience with Zero Trust architecture and cloud security (AWS, Azure)
• Experience with MITRE ATT&CK-based detection coverage analysis