Endpoint Security Engineer

Description

Title : Endpoint Security Engineer

Location : Hybrid - Washington, DC

Terms : Full-Time

Clearance : Must be a U.S. Citizen and able to obtain a Public Trust

Travel : None

RESULTS. INNOVATION. VALUES. ACCOUNTABILITY.

That's RIVA. Our employee-first approach has created a culture that attracts the best and brightest. By investing in people first and providing a flexible work environment, our employees have higher morale, productivity, and retention. At RIVA, people are our #1 priority.

Program Overview

RIVA Solutions is seeking a mission-driven Endpoint Security Engineer to support the Department of Health and Human Services (HHS) Office of Inspector General (OIG). This individual will work in a hybrid capacity based in Washington, DC, and provide technical security engineering, endpoint device protection, and vulnerability reporting services. This position plays a key role in ensuring cybersecurity compliance across HHS systems and endpoints while aligning with federal mandates such as NIST, FISMA, FedRAMP, and CISA directives.

Role Overview

The Endpoint Security Engineer will be responsible for engineering and maintaining secure endpoint systems, delivering vulnerability reports, and supporting Certification & Accreditation (C&A) processes. The role requires experience working in federal environments and familiarity with compliance standards, technical documentation, and presenting remediation strategies to leadership.

Responsibilities

Endpoint Security Engineering

• Bachelor's degree in Information Systems, Computer Science, Engineering, or related field (or equivalent practical experience).
• 8+ years of experience in IT security engineering, endpoint security, vulnerability management, and C&A processes.
• Strong knowledge of federal IT security frameworks, including :
• NIST SP 800 series (800-53, 800-122, 800-157, 800-207, etc.)
• FIPS 140-2 and FIPS 201-2
• FedRAMP standards
• FISMA requirements
• CISA Binding Operational Directives (BODs) and KEV reporting requirements
• Hands-on experience with vulnerability assessment, CVE / KEV reporting, and remediation tracking.
• Experience preparing and presenting security findings and compliance reports to executive management.
• Expertise in endpoint engineering and SIEM integration.
• Strong documentation and technical writing skills, including C&A documentation.

Vulnerability Management & Compliance Reporting

Security Support & Accreditation

Required Qualifications

Preferred Qualifications

Salary

Up to $120,000 annually, based on experience and qualifications.

RIVA Benefits

Equal Opportunity Statement

RIVA Solutions is an Equal Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other protected class. If you need a reasonable accommodation to search for a job opening or to submit an online application, please email [email protected]. Only messages left for this purpose will be returned.