Senior Cybersecurity Engineer

Senior Cybersecurity Engineer

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.

The Senior Cybersecurity Engineer will have the opportunity to conduct cybersecurity engineering to help safeguard computer systems, networks, and data against cyber threats. This role involves designing, implementing, and maintaining security measures to protect sensitive information.

A Senior Cybersecurity Engineer is responsible for leading the design, implementation, and management of the organization's cybersecurity measures to protect information systems and networks. This role involves advanced security architecture, threat analysis, and incident response, requiring extensive experience and technical expertise. The Senior Cybersecurity Engineer plays a critical role in shaping the organization's security strategy and mentoring junior team members.

Responsibilities include:

• Develop and implement comprehensive security strategies and architectures for the organization.
• Ensure that security controls are integrated into the design and implementation of systems and applications.
• Evaluate and recommend new security technologies and solutions to enhance the organization's security posture.
• Lead advanced threat analysis and vulnerability assessments.
• Oversee and coordinate incident response efforts, including investigation, containment, remediation, and reporting.
• Develop and refine incident response plans, playbooks, and procedures.
• Conduct regular and thorough vulnerability assessments and penetration testing.
• Analyze and prioritize vulnerabilities, coordinating with IT teams for remediation.
• Monitor and report on the effectiveness of vulnerability management efforts.
• Manage and optimize a wide range of security tools and technologies (e.g., SIEM, firewalls, IDS/IPS, endpoint protection).
• Evaluate and implement new security tools and technologies to improve security operations.
• Ensure compliance with relevant security standards and regulations (e.g., ISO 27001, NIST, GDPR).
• Conduct risk assessments and develop risk mitigation strategies.
• Prepare and maintain documentation for compliance audits and assessments.
• Provide guidance and mentorship to junior and mid-grade cybersecurity team members.
• Lead and participate in complex security projects and initiatives.
• Collaborate with other departments and stakeholders to ensure cohesive security practices.

The team:

Deloitte's Government & Public Services (GPS) practice our people, ideas, technology and outcomes is designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise.

Our Cyber Defense & Resilience offering assists clients in defending against advanced threats by transforming security operations, monitoring technology, data analytics, and threat intelligence. Helps manage and protect dynamic attack surfaces and provides rapid crisis and cyber incident response, ensuring clients can be ready for, respond to, and recover from business disruptions.

The Project Delivery Talent Model is designed for professionals with specialized skills that align to a current client need. Team members focus on delivering services to clients, without additional expectations related to business development or promotion. Their employment is tied to their role on a project, and they are eligible for a benefits package that is competitive for project delivery-focused professionals.

Qualifications required:

• Bachelor's degree required.
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
• Must have TS/SCI with FSP
• Must be local to Chantilly, VA and able to come onsite 5 days a week in Chantilly, VA.
• 5+ years of the following experience:
• Proven experience in security architecture, threat analysis, and incident response.
• Extensive knowledge of cybersecurity principles and practices.
• Proficiency with a wide range of security tools and technologies (e.g., SIEM, firewalls, IDS/IPS, endpoint protection).
• Strong understanding of network protocols, operating systems (Windows, Linux), cloud security, and cloud computing technology and hypervisors such as HyperV, VMWare, or Virtual Box.
• Demonstrated experience with network management systems, network storage, backup systems, and disaster recovery (DR) architectures.
• Experience with scripting and automation for security tasks.
• Experience conducting technical risk assessments and providing technical risk mitigation guidance on the use of various enabling technologies.
• Demonstrated experience analyzing IT network configurations of devices such as firewalls, routers, switches, VPNs, or Intrusion Detection/Prevention Systems for cyber security vulnerabilities.
• Demonstrated experience with transitioning security domains and use of cross domain appliances.
• Demonstrated experience analyzing procurement processes of hardware, software and services to comply with cyber security and operational needs.
• Demonstrated experience with communications protocols such as IP, TCP, UDP, HTTP, HTTPS, MPLS, OSPF, IGRP, BGP, SIP, H.323.
• Demonstrated experience creating concise and well-structured analysis and vulnerability assessments.