senior cybersecurity analyst

application security engineer Jobs in Washington

application security engineer

aws cloud security assurance manager Jobs in Washington

aws cloud security assurance manager

cloud & security analyst i - washington d.c. Jobs in Washington

cyber threat intelligence analyst (ts/sci req) Jobs in Washington

cybersecurity cloud engineer

Quzara LLC

<div><p><b>Job Title: </b>Cybersecurity Cloud Engineer</p><p><b>
Pay Type</b>: SALARIED EXEMPT</p><p><b>
Location: </b>Hybrid, Washington, DC (Must Work East Coast Hours)</p><p><b>
Citizenship: </b>U.S. Citizenship (Required)</p><p><b>
Summary of Position Role/Responsibilities</b></p><p>
The Cybersecurity Cloud Engineer is responsible for designing, implementing, and maintaining secure cloud environments across Quzara&rsquo;s federal and commercial platforms. This role emphasizes deploying and managing cloud-native security controls, integrating cloud telemetry with security operations tools, and ensuring ongoing compliance with federal standards such as NIST, FedRAMP, and agency-specific policies. The position supports secure architectures in IaaS, PaaS, and SaaS environments, requiring hands-on expertise in cloud security services, strong knowledge of security operations integration, and the ability to drive both engineering and compliance initiatives.</p><p><b>
Essential Functions of the Job</b></p><div><ul><li>
Implement and support secure cloud architectures aligned with NIST, FedRAMP, and agency-specific security policies.</li><li>
Support the design and maintenance of cloud security reference architectures across platforms such as AWS and Microsoft Azure.</li><li>
Configure and maintain cloud-native security services and controls, including identity, logging, monitoring, and threat protection capabilities.</li><li>
Integrate cloud telemetry and logging data into SIEM and Security Operations (SecOps) platforms to support monitoring and detection activities.</li><li>
Support cloud security incident detection, investigation, and remediation in coordination with SOC and incident response teams.</li><li>
Assist in the enforcement of continuous compliance requirements, including validation of control implementation and support for audit readiness.</li><li>
Produce and maintain cloud security documentation, including system diagrams, architecture artifacts, and control narratives.</li><li>
Collaborate with engineering, DevSecOps, and compliance teams to ensure alignment between cloud implementations and security requirements.</li></ul></div><p><b>
Marginal Functions of the Job</b></p><div><ul><li>
Other duties as assigned</li></ul></div><p><b>
Normal Work Schedule</b>:</p><p>
This full-time role runs Monday to Friday, 8:30 AM&ndash;5:30 PM and requires flexibility to work remotely or on-site (if applicable per client RTO policies). On occasion additional hours may be necessary.</p><p><b>
Education, Training, and Experience</b></p><div><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or a related field.</li><li>
3&ndash;5+ years of experience supporting cloud security engineering or cloud infrastructure in regulated environments.</li><li>
Hands-on experience with cloud platforms such as AWS and/or Microsoft Azure.</li><li>
Familiarity with federal cybersecurity frameworks including NIST SP 800-53 and FedRAMP.</li><li>
Experience configuring cloud-native security tools (e.g., identity and access controls, logging, monitoring, and threat protection services).</li><li>
Experience integrating cloud environments with SIEM or SecOps platforms.</li><li>
Ability to produce technical documentation, diagrams, and security artifacts.</li><li>
Strong analytical and problem-solving skills, with the ability to support incident response and remediation efforts.</li><li>
Must be a U.S. Citizen and eligible to support federal contracting environments.</li></ul></div><p><b>
Preferred Certifications</b></p><div><ul><li>
Cloud and security certifications such as:<ul><li>
AWS Certified Solutions Architect</li><li>
Microsoft Certified: Azure Security Engineer Associate (AZ-500)</li><li>
CompTIA Security+</li></ul></li><li>
Additional certifications related to cloud security or compliance frameworks are also a plus.</li></ul></div><p><b>
EEO Statement</b></p><p>
The Company is an Equal Employment Opportunity (EEO) employer and does not discriminate based on race, color, religion, sex, sexual orientation, national origin, age, marital status, disability, veteran's status, or any other basis protected by applicable discrimination laws.</p></div>

Cybersecurity Cloud Engineer

Anakim Consulting Inc

<div><p><b>Talent Network - All Locations</b><br>
<b>Washington, DC</b></p>
<p>Anakim Consulting is always on the lookout for talented professionals to join our team.</p>
<p>If you have a flexible timeline to make your next job move, we welcome you to join our Talent Network. Applications are reviewed on an ongoing basis to meet hiring needs. <i>All positions are contingent on customer funding and approval.</i></p>
<p><b>Job Type: </b>Full Time W2<br>
<b>Location</b>: Varied by position and may require hybrid/on-site schedules<br>
<b>Schedule:</b> All positions are full-time. Some roles may require shift work and non-standard hours including nights and weekends.</p>
<p><b>Security Clearance:</b> Current Security Clearance, NASA, IRS MBI and DHS Suitiability preferred</p>
<p><b>Positions vary and ongoing roles may include:
</b></p><ul><li>Configuration Management (Cloud Services)</li>
<li>Pega Developers, Testers, Business Analysts</li>
<li>System Engineer</li>
<li>Network Engineer (Cisco/Juniper/Aruba)</li>
<li>Senior Software Engineer (Video Workflows)</li>
<li>Enterprise Architect (Microsoft and Cisco Telephony Platforms)</li>
<li>Microsoft Telephony Engineer (E911)</li>
<li>Cybersecurity Expert (Microsoft and Cisco Telephony Platforms)</li>
<li>Linux System Administrator (varied environments)</li>
<li>Network Operations Center (NOC) Specialist</li>
<li>Network Monitor</li>
<li>System Support Specialist</li>
<li>System Administrator (Atlassian/Jira)</li>
<li>Security Engineer (Fortinet)</li>
<li>Cybersecurity Watch Officer (DHS)</li></ul></div>

Talent Network - All Locations

<div><p><b>Job Title: </b>Network and Edge Security Engineer</p><p><b>
Pay Type</b>: SALARIED EXEMPT</p><p><b>
Location: </b>Hybrid, Washington, DC (Must Work East Coast Hours)</p><p><b>
Citizenship: </b>U.S. Citizenship (Required)</p><p><b>
Summary of Position Role/Responsibilities</b></p><p>
The Network and Edge Security Engineer is responsible for designing, implementing, and supporting secure network and edge architectures across enterprise, cloud, and hybrid environments. This role focuses on establishing secure connectivity, enforcing segmentation strategies, and integrating network security controls with enterprise security tooling, while ensuring alignment with Zero Trust principles, enterprise security standards, and federal compliance requirements such as NIST, FISMA, and FedRAMP. The ideal candidate should possess hands-on experience in network security engineering, secure architecture design, and operational support of network and edge security controls within regulated environments.</p><p><b>
Essential Functions of the Job</b></p><div><ul><li>
Support the design and implementation of secure enterprise, cloud, and edge network architectures, ensuring scalability and resilience.</li><li>
Implement and manage network security controls, including firewalls, secure gateways, VPNs, and Zero Trust Network Access (ZTNA) solutions.</li><li>
Configure and monitor network segmentation, including DMZ architectures and micro-segmentation strategies.</li><li>
Integrate network security controls with enterprise platforms such as Identity and Access Management (IAM), SIEM, SOAR, and SOC tooling.</li><li>
Ensure network configurations and controls align with NIST, FISMA, and FedRAMP requirements.</li><li>
Develop and maintain network security diagrams, standard operating procedures (SOPs), and technical documentation.</li><li>
Collaborate with Security Engineering, DevSecOps, and Compliance teams to ensure consistent enforcement of security controls across environments.</li><li>
Support troubleshooting and resolution of network security issues impacting system availability or compliance posture.</li></ul></div><p><b>
Marginal Functions of the Job</b></p><div><ul><li>
Other duties as assigned</li></ul></div><p><b>
Normal Work Schedule</b>:</p><p>
This full-time role runs Monday to Friday, 8:30 AM&ndash;5:30 PM and requires flexibility to work remotely or on-site (if applicable per client RTO policies). On occasion additional hours may be necessary.</p><p><b>
Education, Training, and Experience</b></p><div><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or a related field.</li><li>
4&ndash;6+ years of experience in network security engineering or infrastructure security roles.</li><li>
Hands-on experience implementing and managing firewalls, VPNs, secure gateways, and network segmentation controls.</li><li>
Familiarity with Zero Trust architecture principles and secure connectivity models.</li><li>
Experience integrating network controls with IAM, SIEM, SOAR, and SOC environments.</li><li>
Working knowledge of federal compliance frameworks such as NIST SP 800-53, FISMA, and FedRAMP.</li><li>
Experience developing technical documentation, architecture diagrams, and operational procedures.</li><li>
Strong troubleshooting and analytical skills in network and security domains.</li><li>
Must be a U.S. Citizen and eligible to support federal contracting environments.</li></ul></div><p><b>
Preferred Certifications</b></p><div><ul><li>
Cisco Certified Network Professional (CCNP Security) or equivalent</li><li>
CompTIA Security+, Network+, or similar certifications</li><li>
Cloud-related certifications (e.g., Azure Network Engineer Associate (AZ-700), AWS Advanced Networking) are also a plus</li></ul></div><p><b>
EEO Statement</b></p><p>
The Company is an Equal Employment Opportunity (EEO) employer and does not discriminate based on race, color, religion, sex, sexual orientation, national origin, age, marital status, disability, veteran's status, or any other basis protected by applicable discrimination laws.</p></div>

Network & Edge Security Engineer

<p><b>IT Security Engineer</b></p><p>We are seeking a highly skilled and proactive IT Security Engineer to take ownership of the organization&rsquo;s end-to-end security program. This individual will be responsible for protecting systems, data, and infrastructure while partnering cross-functionally to ensure security is embedded across all technology and business operations. This role reports directly to the IT Director.</p><p><b>Key Responsibilities</b></p><ul><li>Own and manage the full lifecycle of the organization&rsquo;s cybersecurity program</li><li>Conduct penetration testing, vulnerability scanning, and ongoing risk assessments to identify and mitigate threats</li><li>Develop, implement, and maintain security policies, procedures, and compliance documentation</li><li>Ensure adherence to regulatory frameworks including GDPR and HIPAA, with future exposure to ISO standards</li><li>Lead incident response efforts, including investigation, containment, and remediation of security events</li><li>Collaborate with internal teams to integrate security into daily operations and new technology initiatives</li><li>Provide strategic input on the development and evolution of the organization&rsquo;s technology stack</li><li>Manage vendor relationships, including evaluating third-party security practices and overseeing audits</li><li>Oversee endpoint and system security, including patching, monitoring, and access controls</li><li>Partner with external security vendors (e.g., SOC, EDR) to monitor systems and respond to threats</li><li>Deliver security awareness training and guidance to end users to reduce risk and improve best practices</li><li>Support audits, security questionnaires, and compliance-related requests</li></ul><p><b>Technical Environment</b></p><ul><li>Microsoft Azure Active Directory supporting approximately 130 end users</li><li>Experience with cloud security, identity and access management, MFA, and endpoint protection tools</li></ul><p><b>Qualifications</b></p><ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, or related field (or equivalent experience)</li><li>5+ years of experience in cybersecurity or security engineering roles</li><li>Strong expertise in security technologies including firewalls, VPNs, SIEMs, IDS/IPS, and endpoint security</li><li>Experience with penetration testing, vulnerability management, and incident response</li><li>Familiarity with compliance frameworks such as GDPR, HIPAA, and general knowledge of ISO standards</li><li>Industry certifications such as CISSP, CISM, or similar are preferred</li></ul><p><b>Skills &amp; Competencies</b></p><ul><li>Strong analytical and problem-solving abilities with a proactive approach to risk mitigation</li><li>Excellent written and verbal communication skills, with the ability to translate technical concepts to non-technical stakeholders</li><li>High attention to detail and ability to manage multiple priorities in a fast-paced environment</li><li>Strong cross-functional collaboration and stakeholder management skills</li></ul><p><b>Additional Information</b></p><ul><li>Role requires local candidates with a hybrid schedule of three days onsite (Monday required)</li><li>Involves regular interaction with leadership and cross-functional teams across the organization</li><li>Interview process consists of three stages: initial virtual interview followed by two onsite meetings with technical leadership and executive team</li></ul><p>Pay: $130,000.00 - $170,000.00 per year</p><p>Work Location: Hybrid remote in Washington, DC 20036</p>

IT Security Engineer

<div><p><b>Job Title: </b>Cybersecurity Solutions Architect (CSA)</p><p><b>
Pay Type</b>: SALARIED EXEMPT</p><p><b>
Location: </b>Hybrid, Washington, DC (Must Work East Coast Hours, United States)</p><p><b>
Citizenship: </b>U.S. Citizenship (Required)</p><p><b>
Summary of Position Role/Responsibilities</b></p><p>
The Cybersecurity Solutions Architect (CSA) acts as the technical authority for designing, validating, and overseeing comprehensive cybersecurity solutions across Quzara&rsquo;s federal and enterprise environments. This role ensures alignment with Zero Trust principles, enterprise standards, and mission-specific requirements, while translating complex security and operational needs into scalable, resilient, and compliant technical architectures for cloud and hybrid settings. Additionally, the CSA advises leadership on architectural risks, technology tradeoffs, and long-term technical direction to support the secure delivery of solutions under the Technology Support Services (TSS) framework.</p><p><b>
Essential Functions of the Job</b></p><div><ul><li>
Design and validate end-to-end cybersecurity solution architectures across cloud, hybrid, and enterprise environments.</li><li>
Translate security, compliance, and mission requirements into implementable technical designs and architectural blueprints.</li><li>
Review and approve security architectures, system diagrams, and integration patterns to ensure consistency and compliance with standards.</li><li>
Ensure alignment of all solutions with Zero Trust architecture principles, SecOps tooling, and enterprise security frameworks.</li><li>
Identify architectural risks, gaps, and constraints, and provide actionable mitigation strategies.</li><li>
Provide technical oversight and governance during solution implementation, ensuring adherence to approved architectures.</li><li>
Establish architecture patterns and implementation approaches that support scalability, resilience, high availability, and business continuity.</li><li>
Oversee and guide technical change management processes impacting system architecture and integrations.</li><li>
Advise executive leadership and stakeholders on technical direction, risk posture, and tradeoffs associated with cybersecurity solutions.</li><li>
Support technology selection, vendor evaluations, and solution design decisions from an architectural and security perspective.</li></ul></div><p><b>
Marginal Functions of the Job</b></p><div><ul><li>
Other duties as assigned</li></ul></div><p><b>
Normal Work Schedule</b>:</p><p>
This full-time role runs Monday to Friday, 8:30 AM&ndash;5:30 PM and requires flexibility to work remotely or on-site (if applicable per client RTO policies). On occasion additional hours may be necessary.</p><p><b>
Education, Training, and Experience</b></p><div><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Technology, or a related field.</li><li>
8+ years of experience in cybersecurity, with a strong focus on solution architecture, system design, and security engineering.</li><li>
Demonstrated experience designing and implementing enterprise security architectures in cloud and hybrid environments.</li><li>
Strong understanding of Zero Trust architecture, security frameworks, and enterprise security design principles.</li><li>
Experience translating business and mission requirements into technical architecture solutions.</li><li>
Proven ability to lead architectural reviews and provide technical governance across multiple projects.</li><li>
Experience advising senior leadership on security risks, tradeoffs, and technical strategy.</li><li>
Familiarity with federal and regulatory frameworks such as NIST SP 800-53, FedRAMP, and related compliance standards is preferred.</li><li>
Strong communication skills with the ability to present complex architectural concepts to both technical and executive audiences.</li><li>
Must be a U.S. Citizen and eligible to support federal contracting environments.</li></ul></div><p><b>
Preferred Certifications</b></p><div><ul><li>
CISSP (Certified Information Systems Security Professional)</li><li>
AWS Certified Solutions Architect or Microsoft Certified: Azure Solutions Architect Expert (AZ-305)</li><li>
Certified Cloud Security Professional (CCSP) or equivalent</li><li>
Additional enterprise architecture or security certifications are also a plus</li></ul></div><p><b>
EEO Statement</b></p><p>
The Company is an Equal Employment Opportunity (EEO) employer and does not discriminate based on race, color, religion, sex, sexual orientation, national origin, age, marital status, disability, veteran's status, or any other basis protected by applicable discrimination laws.</p></div>

Cybersecurity Solutions Architect

MCN Build

<div><div><div><div><div><b>GENESYS IMPACT LLC</b></div><div><b>
JOB DESCRIPTION</b></div><div><i>
Cloud &amp; Security Analyst I</i></div></div></div><div><div><div><b><br>
Department</b></div><div>
IT Services</div></div><div><div><b><br>
Location</b></div><div>
Washington, DC (Hybrid)</div></div><div><div><b><br>
FLSA Status</b></div><div>
Exempt</div></div><div><div><b><br>
Clearance</b></div><div>
MBI Public Trust or Higher</div></div></div></div><div></div><div><b><br>
ABOUT GENESYS IMPACT</b></div><div></div><div><br>
Genesys Impact LLC is a Washington, DC-based technology integrator specializing in IT managed services, cybersecurity, structured cabling, audiovisual systems, and physical security solutions. We serve commercial and federal government clients across the DMV area, delivering end-to-end technology solutions from design through implementation and ongoing support.</div><div><b>
POSITION SUMMARY</b></div><div>
The Cloud &amp; Security Analyst I is a technical role responsible for supporting Microsoft 365 cloud administration, cybersecurity compliance, and security governance activities across Genesys Impact client environments. This position will work closely with senior engineers and project managers to deliver managed services engagements for federal and commercial clients, with a focus on M365 platform management, data loss prevention, and security compliance frameworks.</div><div></div><div><b><br>
KEY RESPONSIBILITIES</b></div><div><b>
Microsoft 365 &amp; SharePoint Administration</b></div><div><ul><li>
Administer SharePoint Online site collections, document libraries, permissions, and governance policies across client M365 tenants</li><li>
Design and implement Power Automate workflows to automate business processes, notifications, and compliance-driven escalations</li><li>
Develop Power Apps and integrate with Microsoft Purview for eDiscovery, content holds, and incident response workflows</li><li>
Configure and maintain OneDrive, Teams, and Exchange Online environments in alignment with client security requirements</li><li>
Consolidate and migrate SharePoint sites; redesign information architecture and establish governance frameworks</li></ul></div><div></div><div><b><br>
Security, Compliance &amp; Data Governance</b></div><div><ul><li>
Implement and manage Data Loss Prevention (DLP) policies across M365 services including Exchange Online, OneDrive, and Teams</li><li>
Design Sensitive Information Types (SITs) and Trainable Classifiers to protect FII, PII, and SBU data categories</li><li>
Perform Data at Rest (DAR), Data in Motion (DIM), and Data in Use (DIU) scanning to identify and remediate exposed sensitive data</li><li>
Support implementation of access controls, governance policies, and compliance measures across integrated M365 services</li><li>
Monitor and respond to DLP policy violations, coordinating with client stakeholders on remediation actions</li><li>
Leverage Microsoft Defender for Cloud Apps (MDCA) and Microsoft Defender for Endpoint (MDE) for threat visibility and response</li></ul></div><div></div><div><b><br>
Automation &amp; Development</b></div><div><ul><li>
Develop Python-based automation scripts leveraging Microsoft Graph API and Security API to streamline security workflows and incident reporting</li><li>
Build integrations between M365 services, Purview eDiscovery, and ticketing/reporting platforms to reduce manual operational overhead</li><li>
Document automation solutions and contribute to internal knowledge base and runbooks</li></ul></div><div></div><div><b><br>
Client Engagement &amp; Support</b></div><div><ul><li>
Provide Tier 2/3 support to client staff on Microsoft 365 suite functionality including SharePoint, Teams, and OneDrive best practices</li><li>
Assist in preparation of federal and commercial technical proposals with input on M365, cloud, and cybersecurity scope sections</li><li>
Participate in client-facing meetings, status updates, and deliverable reviews under the guidance of senior staff</li></ul></div><div><b>
REQUIRED QUALIFICATIONS</b></div><div><ul><li>
Bachelor's degree in Information Technology, Information Systems, Cybersecurity, or related field</li><li>
1&ndash;3 years of hands-on experience with SharePoint Online and the Microsoft 365 ecosystem</li><li>
Demonstrated experience with Power Automate workflow development</li><li>
Working knowledge of Microsoft Purview, DLP policies, and compliance frameworks</li><li>
Familiarity with Python scripting for automation and API integration (Microsoft Graph API a plus)</li><li>
MBI Public Trust clearance or ability to obtain one; higher clearances (Secret, TS) a plus</li><li>
Strong written and verbal communication skills with the ability to translate technical content for non-technical stakeholders</li></ul></div><div><b>
PREFERRED QUALIFICATIONS</b></div><div><ul><li>
M.S. in Information Systems, Cybersecurity, or related discipline</li><li>
Experience supporting federal agency M365 tenants (IRS, DoD, DHA, or similar)</li><li>
Exposure to Microsoft Defender for Cloud Apps (MDCA), Microsoft Defender for Endpoint (MDE), or Splunk SIEM/SOAR</li><li>
Familiarity with Palo Alto Networks, Strata Cloud Manager (SCM), or Symantec Broadcom DLP</li><li>
Microsoft certifications (MS-900, SC-900, AZ-900, MS-500, AZ-500) or active pursuit thereof</li><li>
Experience contributing to federal or state technical proposals</li></ul></div><div><b>
COMPENSATION &amp; BENEFITS</b></div><div></div><div><div><div><b><br>
Salary Range</b></div><div><br>
$80,000 &ndash; $90,000 annually</div></div><div><div><b><br>
Health Benefits</b></div><div><br>
Medical, dental, and vision coverage</div></div><div><div><b><br>
Paid Time Off</b></div><div><br>
Competitive PTO and federal holiday schedule</div></div><div><div><b><br>
Professional Dev.</b></div><div><br>
Certification reimbursement and training support</div></div><div><div><b><br>
Work Arrangement</b></div><div><br>
Hybrid &mdash; Washington, DC metro area; client site travel as required</div></div></div><div></div><div><i><br>
Genesys Impact LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or protected veteran status.</i></div></div>

Cloud & Security Analyst I - Washington D.C.

THUNDERYARD SOLUTIONS

<p><b>Job Description:</b></p><p>The U.S. Department of the Treasury is seeking an experienced Lead Business Process Engineer to design, operationalize, and implement a comprehensive Security Development Lifecycle (SDL) framework as part of the Treasury Enterprise Cyber Consolidation initiative. This critical role will ensure security is embedded throughout the software development lifecycle for all Treasury applications, enhancing the Department's security posture while achieving compliance with federal regulations and standards.</p><p>The Lead Business Process Engineer will be responsible for conducting discovery across all existing SDL services at Treasury, identifying gaps in current application security practices, and designing a tailored SDL framework that integrates security best practices into every phase of development. This position requires translating complex security requirements and industry standards into practical, repeatable processes that development teams can adopt while maintaining alignment with Treasury's strategic cybersecurity objectives and the broader Treasury Common Services Center (TCSC) implementation.</p><p><b>Key Responsibilities:</b></p><ul><li>SDL Framework Design: Develop a comprehensive application-layer Security Development Lifecycle framework tailored to Treasury's unique requirements, mission context, and regulatory environment, ensuring security is integrated from requirements gathering through deployment and maintenance</li><li>Current-State Discovery: Conduct thorough discovery of all component SDL services, security practices, and procedures currently incorporated into existing application development lifecycles across Treasury Bureaus</li><li>Gap Analysis and Recommendations: Identify gaps in current SDL coverage and recommend updates or additions to SDL services, methods, and techniques based on industry best practices, NIST guidance, and applicable regulatory, legal, or statutory requirements</li><li>Process Documentation: Create detailed SDL guidance documentation including process workflows, security gates, approval criteria, roles and responsibilities, and integration points with existing development methodologies (Agile, DevOps, Waterfall)</li><li>Security Requirements Integration: Define security requirements and acceptance criteria for each SDL phase, including threat modeling, secure design principles, secure coding standards, security testing requirements, and vulnerability remediation processes</li><li>Tool and Automation Strategy: Recommend and integrate security tools into the SDL framework including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), and container security scanning</li><li>Stakeholder Engagement: Collaborate with application development teams, security architects, ISSOs, system owners, and Bureau stakeholders to validate SDL processes and secure adoption across the enterprise</li><li>Training and Enablement: Develop training materials, playbooks, and job aids to support developer adoption of SDL practices and ensure consistent implementation across Treasury</li><li>Metrics and Continuous Improvement: Establish SDL performance metrics and maturity indicators to measure adoption, effectiveness, and security outcomes, enabling continuous refinement of the framework</li><li>Compliance Alignment: Ensure SDL framework supports compliance with NIST SP 800-53 Rev. 5, NIST Secure Software Development Framework (SSDF), OMB M-22-18, and other applicable federal secure development requirements</li></ul><p><b>Required Requirements:</b></p><ul><li>Minimum 7 years of experience in application security, secure software development, or DevSecOps roles</li><li>Minimum 5 years of experience designing or implementing Security Development Lifecycle frameworks, secure SDLC programs, or application security processes in enterprise environments</li><li>Demonstrated experience conducting application security assessments, threat modeling, and secure code reviews</li><li>Proven track record implementing security testing tools (SAST, DAST, SCA) and integrating security into CI/CD pipelines</li><li>Experience with federal government application security requirements and compliance frameworks</li><li>Strong background in software development methodologies (Agile, DevOps, Waterfall) and development lifecycle management</li><li>Experience working with cross-functional teams including developers, architects, security teams, and business stakeholders</li><li>Expertise with DevSecOps practices and security automation in CI/CD pipelines</li><li>Knowledge of federal compliance requirements including NIST SP 800-53 controls related to application security (SA, SI, SC families)</li><li>Experience with Microsoft Visio</li><li>Professional Competencies:</li><li>Excellent communication skills with ability to engage both technical and non-technical stakeholders</li><li>Strong analytical and problem-solving capabilities</li><li>Experience facilitating workshops and working sessions with development teams</li><li>Ability to balance security requirements with development velocity and business needs</li><li>Demonstrated ability to drive adoption of new processes and practices across organizations</li><li>Ability to obtain and maintain a federal security clearance (Secret or higher)</li></ul><p><b>Preferred Requirements:</b></p><ul><li>Active Public Trust for Department of Treasury</li><li>Advanced Certifications:</li></ul><p>&ndash; Master's degree in Business, Computer Science, Cybersecurity, Software Engineering, or related field</p><p>&ndash; Offensive Security Certified Professional (OSCP) or similar penetration testing certification</p><p>&ndash; Certified Ethical Hacker (CEH)</p><p>&ndash; AWS Certified Security Specialty or Azure Security Engineer Associate</p><p>&ndash; GIAC Cloud Security Automation (GCSA)</p><p>&ndash; Certified DevSecOps Professional (CDP)</p><ul><li>Prior experience with Treasury or other Cabinet-level federal agency application security programs</li><li>Experience implementing SDL frameworks aligned to NIST SSDF or similar federal secure development standards</li><li>Published thought leadership on secure development, DevSecOps, or application security</li><li>Knowledge of FedRAMP security requirements for cloud applications</li><li>Experience with container orchestration security (Kubernetes, Docker) and infrastructure-as-code security</li><li>Familiarity with Treasury-specific applications, development environments, or compliance requirements</li><li>Experience with ServiceNow Security Operations or GRC modules for application security tracking</li><li>Understanding of microservices security architecture and zero trust application design</li><li>Experience with SAFe (Scaled Agile Framework) or other enterprise agile methodologies</li><li>Knowledge of CMMI for Development or similar maturity models</li></ul><p><b>Required Education &amp; Certifications:</b></p><ul><li>Bachelor's degree in Business, Computer Science, Software Engineering, Information Security, or related field</li><li>One or more of the following certifications required:</li></ul><p>&ndash; Certified Secure Software Lifecycle Professional (CSSLP)</p><p>&ndash; Project Management Professional</p><p>&ndash; Lean Six Sigma Green Belt or Greater</p><p><b>Compensation:</b></p><p>The salary for this role is budgeted at $120,000-$140,000 annually, plus benefits. ThunderYard offers benefits including medical, dental and vision insurance, 401k matching, PTO, certification reimbursement and more.</p><p><b>Vetting</b></p><p>Candidates selected will be subject to a background investigation for clearance eligibility by our government client.</p><p><i>ThunderYard Solutions is proud to be an Equal Opportunity Employer. We don&rsquo;t just accept difference &ndash; we celebrate it, we support it, and we thrive on it for the benefit of our employees, our community, and our customers. All applicants will be considered for employment without discrimination of race, color, religion, or belief, national, social, or ethnic origin, sex, age, physical, mental, or sensory disability, HIV status, sexual orientation, gender identity and/or expression, marital, civil union, or domestic partnership status, protected veteran status, family medical history or genetic information.</i></p><p>Job Type: Full-time</p><p>Pay: $120,000.00 - $140,000.00 per year</p><p>Benefits:</p><ul><li>401(k)</li><li>401(k) matching</li><li>Dental insurance</li><li>Employee assistance program</li><li>Flexible schedule</li><li>Health insurance</li><li>Health savings account</li><li>Paid time off</li><li>Professional development assistance</li><li>Referral program</li><li>Vision insurance</li></ul><p>Work Location: Hybrid remote in Washington, DC 20590</p>

Lead Business Process Engineer- IRS (DC)

Explore 73+ Cybersecurity cloud engineer in Washington this April. Find roles across top companies and apply now to boost your career.