Talent.com
Senior Cybersecurity Engineer - Compliance & Risk Management

Senior Cybersecurity Engineer - Compliance & Risk Management

Human Resources Research OrganizationAlexandria, VA, US
30+ days ago
Job type
  • Full-time
Job description

Job Description

Job Description

Senior Cybersecurity Engineer - Compliance & Risk Management

The Human Resources Research Organization (HumRRO) is a non-profit leader in developing high-impact services and products in the arenas of employment, military, student testing, and professional credentialing and licensure. We work with federal and state government agencies, private sector organizations, and professional associations.

About the Organization

As a non-profit, HumRRO is dedicated to work that contributes to science and society. Our employees enjoy a highly collaborative and supportive environment that fosters innovation, ethical practice, and outstanding customer service. Our core operational staff includes Industrial-Organizational Psychologists, Educational Researchers, and Behavioral Science Consultants. We are committed to supporting a diverse workforce and to practicing equity and inclusion for all staff.

About the Job

We are seeking a Senior Cybersecurity Engineer to lead our enterprise compliance and security programs across federal, state, and private sector engagements. This role manages multiple compliance frameworks including CMMC, FedRAMP, SCRM, NIST 800-171 / 53, and ISO 27001 : 2022 regulatory requirements. You will work on compliance standards across hybrid cloud environments while leading a team of junior engineers conducting vulnerability assessments and security scanning operations. A significant portion of this role involves creating security documentation, developing compliance policies, responding to time-critical security requirements from clients, and managing third-party compliance audits.

As a Senior Cybersecurity Engineer, you will :

  • Lead enterprise cybersecurity compliance programs (CMMC, FedRAMP, SCRM, NIST frameworks, ISO 27001 : 2022)
  • Manage monthly compliance reporting and KPI dashboards for executive leadership
  • Coordinate third-party compliance audits (NIST 800-171, CMMC, ISO 27001, FedRAMP) and remediation activities
  • Maintain compliance evidence catalogs and SaaS compliance implementation controls
  • Evaluate and implement security controls across software applications and cloud platforms AWS, Azure, and Office 365
  • Oversee Risk Management Framework (RMF) processes for government contract organizations as well as applications in the DoD space (ATO / IATT / IATO documentation)
  • Conduct weekly Plan of Action and Milestone (POA&M) reviews and monthly security assessments
  • Develop and maintain security policies, procedures, and technical standards
  • Lead vulnerability management programs & conduct security assessments and penetration testing coordination
  • Manage business continuity of operations (COOP) program including disaster recovery and crisis management plans
  • Lead incident response and security event investigation
  • Mentor and manage junior cybersecurity engineers and analysts
  • Interface with federal agencies, auditors, and compliance assessors
  • Work with system architects for security requirements on existing cloud workloads, cloud migrations and / or hybrid environments
  • Facilitate and oversee completion of all customers' cyber security questionnaires and qualifications with time-critical deadlines
  • Coordinate with HumRRO Contracts Division on written responses to RFPs regarding IT security, controls, data privacy and regulatory compliance
  • Assist with implementation and administration of cybersecurity supply chain risk management (C-SCRM) program
  • Develop compliance documentation and security narratives for proposals
  • Support business development with technical security expertise
  • Serve as subject matter expert on internal security controls and regulations

Minimum Requirements :

  • US Citizen with ability to obtain / maintain security clearance
  • Work on-site at Alexandria VA (Up to 2 remote days possible after probation period)
  • Bachelor's degree in Cybersecurity, Computer Science, or equivalent field. Work experience may be considered in lieu of degree
  • 7+ years of cybersecurity engineering and compliance experience
  • 5+ years of enterprise experience managing Risk and Compliance efforts including multiple regulatory and standard security frameworks
  • Existing Security+ certification or the ability to obtain within 6 months (CISSP, CCSP, or CISM preferred)
  • Deep expertise in NIST 800-171, 800-53, RMF, and DoD compliance frameworks
  • Hands-on experience with CMMC and FedRAMP authorization processes
  • Proficiency in Office 365 security configuration and management
  • Experience with vulnerability scanning tools (e.g. ACAS, Nessus, Rapid7, Qualys or equivalent)
  • Strong analytical and information gathering skills with ability to work multiple tasks simultaneously under short deadlines
  • Excellent communication skills for stakeholder engagement
  • Preferred :

  • Active DoD clearance
  • Experience in the nonprofit sector managing IT or related activities
  • CMMC Certified Professional (CCP) or CMMC Certified Assessor (CCA)
  • Experience with FedRAMP 3PAO assessments
  • Knowledge of Supply Chain Risk Management (SCRM) frameworks
  • AWS certifications (Solutions Architect, Security Specialty preferred)
  • Experience with DevSecOps pipeline integration and IAC
  • CISSP, CCSP, CISM, or CISSP-ISSAP certifications
  • Knowledge of DoD STIG implementation and automated compliance tools
  • Federal contracting and audit experience
  • Experience with Atlassian suite (Jira, Confluence)
  • Experience with eMASS package development and continuous monitoring activities
  • Experience with STIG implementation and SCAP compliance validation
  • Experience with bi-annual COOP testing and crisis management plan development
  • Leadership experience managing technical teams
  • People Management Experience is a plus
  • The anticipated salary for this role is $100,000 to $155,000. Specific salary offers are based on candidate qualifications and experience.

    Benefits :

  • Health, dental and vision insurance
  • Life insurance equal to 2x annual salary
  • Retirement plan with company matching
  • Paid professional development and certification maintenance
  • Tuition reimbursement
  • 12 weeks of paid parental leave
  • Generous paid time off and 10 paid holidays
  • All qualified applications will receive consideration without regard to race, color, religion, sex, national origin, age, marital status, sexual orientation, veteran status, medical condition, or disability. EEO / Vet / Disabled.

    Named one of "50 Great Places to Work" by Washingtonian magazine and one of "Top Workplaces" by The Washington Post.

    Create a job alert for this search

    Senior Cybersecurity Engineer • Alexandria, VA, US

    Related jobs
    • Promoted
    Cybersecurity Director

    Cybersecurity Director

    VirtualVocationsAlexandria, Virginia, United States
    Full-time
    A company is looking for a Director of Cybersecurity.Key Responsibilities Drive the cybersecurity posture and practice across delivery and client engagements Own CMMC program delivery, including...Show moreLast updated: 25 days ago
    • Promoted
    Senior Security Engineer

    Senior Security Engineer

    VirtualVocationsFairfax, Virginia, United States
    Full-time
    A company is looking for a Security Infrastructure Support Senior Security Engineer.Key Responsibilities : Design, install, maintain, and support enterprise IT systems across hybrid environments ...Show moreLast updated: 30+ days ago
    Senior Cybersecurity Engineer - Compliance & Risk Management

    Senior Cybersecurity Engineer - Compliance & Risk Management

    Human Resources Research OrganizationAlexandria, VA, USA
    Full-time
    Quick Apply
    Senior Cybersecurity Engineer - Compliance & Risk Management.The Human Resources Research Organization (HumRRO).We work with federal and state government agencies, private sector organizations,...Show moreLast updated: 30+ days ago
    • Promoted
    Cybersecurity Engineer, Contract Manager

    Cybersecurity Engineer, Contract Manager

    Nationwide IT ServicesArlington, VA, US
    Full-time
    Cybersecurity Engineer, Contract Manager.Full-time, contingent upon contract award.Nationwide IT Services (NIS) is seeking a highly qualified. This role will focus on delivering comprehensive cybers...Show moreLast updated: 30+ days ago
    • Promoted
    Cybersecurity CDM Team Lead

    Cybersecurity CDM Team Lead

    VirtualVocationsFairfax, Virginia, United States
    Full-time
    A company is looking for a Continuous Diagnostics and Mitigation (CDM) Team Lead.Key Responsibilities Lead and manage the Continuous Diagnostics and Mitigation (CDM) program to enhance agency sec...Show moreLast updated: 1 day ago
    • Promoted
    Cybersecurity Engineer (DHS)

    Cybersecurity Engineer (DHS)

    LMI Consulting, LLCTysons, VA, United States
    Full-time
    Salaried High Fringe / Full-Time.Department of Homeland Security (DHS) market.LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed.In...Show moreLast updated: 30+ days ago
    • Promoted
    Senior Cybersecurity Specialist

    Senior Cybersecurity Specialist

    VirtualVocationsFairfax, Virginia, United States
    Full-time
    A company is looking for a Senior Cybersecurity Specialist - Red Team - Pentester.Key Responsibilities Maintain secure configurations and operations of IT assets Lead cybersecurity projects and ...Show moreLast updated: 21 days ago
    • Promoted
    Cybersecurity Support Engineer

    Cybersecurity Support Engineer

    VirtualVocationsFairfax, Virginia, United States
    Full-time
    A company is looking for a Cybersecurity Support Engineer III.Key Responsibilities : Lead the design and implementation of secure infrastructure aligned with Zero Trust Architecture principles Co...Show moreLast updated: 1 day ago
    • Promoted
    Cyber Capabilities SME

    Cyber Capabilities SME

    Leidos IncOdenton, MD, United States
    Full-time
    The Cybersecurity Capabilities and Innovations SME shall provide support across the entire command.All SMEs will be centrally managed but may be assigned to work in separate directorates within the...Show moreLast updated: 30+ days ago
    • Promoted
    Senior Cybersecurity Engineer

    Senior Cybersecurity Engineer

    Dark Wolf SolutionsChantilly, VA, US
    Full-time
    They will ensure the confidentiality, integrity, and availability of sensitive data systems and architectures.This position is set to be supported in Chantilly, VA. Key responsibilities include, but...Show moreLast updated: 30+ days ago
    • Promoted
    Senior Cybersecurity Engineer

    Senior Cybersecurity Engineer

    RPI Group IncDahlgren, VA, US
    Full-time
    Contract Task Lead / Cybersecurity Lead.Navy customer at Dahlgren NSWC, VA.Develop cybersecurity requirements, policy standards, best practices, guidance, and procedures for combat systems.Conduct ...Show moreLast updated: 30+ days ago
    • Promoted
    Senior Cybersecurity Architect

    Senior Cybersecurity Architect

    SPECIAL AEROSPACE SECURITY SERVICES INCWashington, DC, US
    Full-time
    The Senior Cybersecurity Architect will lead enterprise-level cybersecurity strategy, architecture design, and compliance for DCIO(IE & SAP-IT) systems. This role ensures alignment with DoD dire...Show moreLast updated: 30+ days ago
    • Promoted
    Cybersecurity Engineer

    Cybersecurity Engineer

    Trident Systems IncFairfax, VA, US
    Full-time
    Trident has built a reputation as a trusted provider of aerospace and defense electronics & processing systems including digital RF & Optical command and control solutions and atmospheric &...Show moreLast updated: 10 days ago
    • Promoted
    Cybersecurity Architect / Engineer

    Cybersecurity Architect / Engineer

    LeidosMount Rainier, MD, US
    Full-time
    Join us in improving and shaping the future of smart mobility with a group of intelligent, motivated, and dedicated individuals! The Leidos Surface Transportation group focuses on improving transpo...Show moreLast updated: 6 days ago
    • Promoted
    Cybersecurity Engineer

    Cybersecurity Engineer

    SPECIAL AEROSPACE SECURITY SERVICES INCWashington, DC, US
    Full-time
    The Cybersecurity Engineer will execute technical security engineering tasks across SAP IT systems, including vulnerability management, patch compliance, and security tool deployment.This role ensu...Show moreLast updated: 30+ days ago
    • Promoted
    Senior Cybersecurity Risk Management Analyst

    Senior Cybersecurity Risk Management Analyst

    Evolver FederalSpringfield, VA, US
    Full-time
    Senior Cybersecurity Risk Management Analyst.Federal client in Springfield, VA in managing a portfolio of systems participating in Ongoing Authorization / Continuous ATO. This role will ensure compli...Show moreLast updated: 30+ days ago
    • Promoted
    Senior Cybersecurity Engineer

    Senior Cybersecurity Engineer

    VirtualVocationsWashington, District of Columbia, United States
    Full-time
    A company is looking for a Senior Cybersecurity Engineer - Infrastructure Support.Key Responsibilities Design, install, maintain, and support Enterprise IT systems with a focus on security infras...Show moreLast updated: 30+ days ago
    • Promoted
    Cybersecurity Engineer

    Cybersecurity Engineer

    VirtualVocationsFairfax, Virginia, United States
    Full-time
    A company is looking for a Cybersecurity Engineer (Remote) to join their Cybersecurity team.Key Responsibilities Lead the integration of security into the SaaS environment and collaborate with En...Show moreLast updated: 30+ days ago