Cybersecurity Engineer

Job Title - Cybersecurity Engineer
Job Location - Mclean, VA

Job Description -
Engineers solutions in alignment with the Cybersecurity engineering road map, and maintains processes for the delivery of highly-complex secure systems, cyber applications, technical projects and regulatory and risk requirements. Facilitates process engineering, risk remediation, and mitigation of operational risk in a high velocity culture by collaborating to introduce technology, requirements, deliverables, gaps and systems design. Contributes to analyzing cyber technologies, metrics models, and performance indicators. Identifies robust solutions and build resilient next-generation systems to solve business challenges and enhance the control environment. Actively manages and escalates risk and customer-impacting issues within the day-to-day role to management.

Major Responsibilities
Analyzes, designs and develops security solutions with Cybersecurity architects to ensure it is consistent with corporate technology goals and risk tolerance levels. Designs and engineers solutions to align with the Cybersecurity Strategy.
Serves as the subject matter expert for supported security technologies, and act as subject matter expert during escalations.
Validates current and future state architectural models to assess impact across assigned Cybersecurity technology systems. Oversees security requirements and technical specifications to guide project implementation towards successful solution delivery.
Provides direction to infrastructure, operations, data and application developments groups throughout transitioning phase, implementation in production and beyond.
Manages relationships with security partners and vendors. Builds and maintains effective relationships with management, peers, project managers and internal customer.
Maintains knowledge of engineering next-gen designs, security trends, threats and attack techniques.
Ensures compliance to audit, regulatory and legal requirements.

Skills Required:
Web Security & Proxy Solutions:
- Experience in managing Netskope SWG, CASB, DLP policies and configurations
- Experience monitoring, reporting, and tuning security policies
- Ability to architect, deploy, and optimize Netskope solutions for enterprise-scale environments
- Hands-on experience with Broadcom Web Proxy and Web Security Services (WSS)
- Proficient in configuration and maintaining policies, content filtering, an secure web access
- Experience with migration, upgrade, and integration projects involving Broadcom solutions
- Experience with Palo Alto Networks firewall policies, including URL/content filtering
Secure Remote Access:
- Strong knowledge of Cisco ASA/Firepower platforms, AnyConnect VPN, and Palo Alto Networks Global Protect
- Experience with network segmentation, access control, and policy enforcement for secure connectivity
- Experience with Secure Remote Access platform migration
Policy & Configuration Management:
- Ability to design, implement, and maintain enterprise security policies across multiple platforms
- Strong understanding of SWG, CASB, and Firewall best practices for cloud, on-premise, and hybrid environments
- Capable of evaluating policy impact and implementing tuning to minimizing business disruption.

Automation & Scripting
- Proficient in Python for automation, reporting, and security tool integration
- Experience with Ansible for configuration management and automated deployments
- Familiarity with Github for version control and collaborative development
Engineering & Architecture
- Ability to design and implement complex security architectures to meet business and compliance requirements
- Experience with large-scale migrations, integrations, and cross-platform security solutions
- Understanding of security protocols, encryption standards, and secure network architectures
- Experience with AWS services and cloud security best practices
- Ability to design, monitor, and secure cloud-based workloads and applications
- Experience creating, modifying, and optimizing dashboards in Grafana and Solarwinds

Analytical & Troubleshooting Skills:
- Strong problem-solving skills and ability to analyze complex technical incidents
- Proficient in root cause analysis for network, policy, or configuration related issues
- Ability to correlate data from multiple sources to identify trends and anomalies
- Comfortable navigating and performing administrative tasks in a Linux shell environment


Additional Skills:
- Strong documentation and communication skills for both technical and non-technical audiences
- Ability to mentor and guide junior engineers
- Strong relationship management skills with business partners, vendors, and internal stakeholders
- Familiarity with regulatory frameworks and audits, specifically PCI-DSS and SOX