Cybersecurity Engineer

Synergy Business Innovation & Solutions, Inc. is seeking a skilled Cybersecurity Engineer to protect and sustain a mission-critical enterprise application environment. The Cybersecurity Engineer will support the design, implementation, assessment, monitoring, and continuous improvement of cybersecurity controls for applications, infrastructure, integrations, and supporting DevSecOps processes.

The successful candidate will work collaboratively with system administrators, DevOps engineers, software developers, database administrators, program leadership, and customer security stakeholders to ensure systems are designed, deployed, operated, and maintained in accordance with applicable federal cybersecurity requirements. This position requires practical experience with security engineering, vulnerability management, secure configuration, risk management, application security, continuous monitoring, and assessment and authorization activities.

The ideal candidate can translate cybersecurity requirements into technically practical controls, identify and remediate security risks, prepare high-quality compliance documentation, and help delivery teams maintain a secure and resilient operational environment.

Primary Responsibilities:

• Design, implement, validate, and maintain cybersecurity controls for enterprise applications, infrastructure, databases, integrations, and supporting platform services.
• Translate customer, regulatory, and organizational cybersecurity requirements into actionable technical requirements, system configurations, security procedures, and implementation plans.
• Support implementation of security controls aligned with the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF), NIST Special Publication (SP) 800-53, and other applicable federal security standards.
• Assess system architecture, data flows, interfaces, and application components to identify security risks, control gaps, and opportunities for security enhancement.
• Participate in secure architecture reviews, design reviews, code-review activities, change-control boards, and production-readiness reviews.
• Support implementation and management of identity, credential, and access-management controls, including least privilege, role-based access control, multifactor authentication, privileged access, and account lifecycle management.
• Evaluate and help implement encryption, certificate management, secure communications, secrets management, and data-protection capabilities.

Required Qualifications:

• Bachelor’s degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, Engineering, or a related field; additional relevant experience may be substituted for a degree.
• Five (5) or more years of experience in cybersecurity engineering, information assurance, security operations, systems engineering, application security, or a related technical discipline.
• Three (3) or more years of direct experience supporting federal cybersecurity compliance, RMF, A&A, continuous monitoring, or equivalent security-governance activities.
• Demonstrated knowledge of NIST RMF and NIST SP 800-53 security-control principles.
• Experience with vulnerability management, including vulnerability scanning, security finding analysis, remediation coordination, risk prioritization, and POA&M tracking.
• Experience with secure configuration and system-hardening practices for Linux/Unix, Windows, applications, databases, or networked enterprise systems.
• Experience supporting security compliance with STIGs, SRGs, or equivalent secure configuration standards.
• Familiarity with identity and access management concepts, including Active Directory, LDAP, role-based access control, privileged access, multifactor authentication, and single sign-on.
• Experience reviewing or supporting application-security testing, such as SAST, DAST, SCA, secrets scanning, API security testing, or container security.
• Experience with security information and event management (SIEM), logging, monitoring, or vulnerability-management tools.
• Ability to create and maintain high-quality cybersecurity documentation, technical reports, risk analyses, system-security artifacts, and remediation plans.
• Strong analytical, written communication, and stakeholder-engagement skills.
• Ability to satisfy applicable government background investigation, suitability, and security requirements.
• Relevant professional certifications, such as: CompTIA Security+.

Preferred Qualifications:

• Experience supporting cybersecurity engineering in a federal, public-sector, homeland security, or similarly regulated environment.
• Experience supporting enterprise workflow, case-management, or low-code platforms, including Appian or comparable platforms.
• Experience securing Java-based enterprise applications, APIs, web services, and integration services.
• Familiarity with on-premises and hybrid-cloud environments, including Amazon Web Services (AWS), Microsoft Azure, OpenShift, Kubernetes, Docker, or similar technologies.
• Experience with security automation and DevSecOps tools, including SonarQube, Snyk, Fortify, Checkmarx, Veracode, OWASP ZAP, Burp Suite, Tenable, Qualys, Rapid7, Splunk, Elastic, or comparable tools.
• Knowledge of Zero Trust Architecture, cloud-security principles, API security, secure software supply-chain practices, and software bill of materials (SBOM) management.
• Experience preparing and maintaining federal security artifacts within governance, risk, and compliance (GRC) platforms.
• Experience with security-control assessments, independent verification and validation, audit support, or Inspector General review support.
• Relevant professional certifications, such as:
• CompTIA Security+;
• Certified Information Systems Security Professional (CISSP);
• Certified Information Security Manager (CISM);
• Certified Authorization Professional (CAP);
• Certified Information Systems Auditor (CISA);
• GIAC Security Essentials (GSEC), GIAC Penetration Tester (GPEN), or similar GIAC certification;
• Certified Ethical Hacker (CEH);
• AWS Certified Security – Specialty;
• Microsoft Certified: Azure Security Engineer Associate.
• Active security clearance or demonstrated eligibility to obtain and maintain the required clearance or suitability determination.

Education Requirements:

• Required: Bachelor’s degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, Engineering, or a related field; additional relevant experience may be substituted for a degree.

Citizenship & Clearance Requirements:

• Required: Secret

Target Salary Range

Compensation for roles at Synergy is determined by a variety of factors including, but not limited to, the requirements of the role; level of experience; education and certifications; the individual’s combination of knowledge, skills, and abilities; as well as alignment with market data, federal and state laws, and other business and contract considerations. The estimated pay range for this position is: $116,400.00 – $125,000.00. The disclosed range has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. It is not typical for an individual to be hired at or near the top of the range for their role, and compensation decisions are dependent on the facts and circumstances of each case and represent just one component of Synergy’s total compensation package for employees. 

Candidate AI Policy

Synergy is committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate evaluation process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly granted. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

Synergy is an equal opportunity employer and does not discriminate against applicants for employment or its employees on the basis of age, race (including hair texture/style), creed, color, religion, religious creed, ancestry, national origin, ethnic origin, sexual orientation, gender identity or expression, military or veteran status, sex, medical condition, pregnancy (childbirth, breastfeeding, and related medical conditions), physical or mental disability, personal appearance, organ donation and hair length associated with race, genetic information or characteristics, family responsibilities, familial status, marital status, citizenship or immigration status, status as a victim of domestic violence, a sexual offense, or stalking, political affiliation, arrest records and criminal convictions, credit information, matriculation, homeless status, or any other characteristic protected by federal, state and local law. Discrimination or harassment based upon these protected categories is expressly prohibited. This policy applies to all aspects of employment, including job selection, assignment, promotion, compensation, benefits, training, discipline, and termination.

#LI-Remote