Cybersecurity Engineer

Cybersecurity Engineer
Company: Horizon Global Partners (HgP)
Division: Defense & Aerospace Services (DAS)
Location: Washington, DC (Hybrid)
Employment Type: Full-Time
Clearance Requirement: Public Trust Tier 2 (Active preferred; ability to obtain required)
Position Summary
Horizon Global Partners (HgP) is seeking a highly skilled Cybersecurity Engineer to support a Federal Government customer by designing, implementing, and maintaining enterprise security controls across cloud, network, endpoint, and identity environments. The successful candidate will help strengthen the organization’s cybersecurity posture by implementing Zero Trust Architecture, enforcing least-privilege access, supporting continuous monitoring, and responding to security threats in accordance with Federal cybersecurity standards.
This position requires experience with enterprise security operations, Identity and Access Management (IAM), cloud security, vulnerability management, SIEM/EDR/XDR platforms, and incident response within complex hybrid environments.
________________________________________
Position Responsibilities
Enterprise Security Engineering
• Design, implement, and maintain enterprise security controls aligned with NIST SP 800-53.
• Support Zero Trust Architecture implementation in accordance with NIST SP 800-207.
• Harden enterprise systems using secure configuration baselines and industry best practices.
• Implement network and environment segmentation to protect critical assets and limit lateral movement.
Identity & Access Management (IAM)
• Configure and administer enterprise Identity and Access Management (IAM) solutions.
• Implement Role-Based Access Control (RBAC), Privileged Access Management (PAM), and Multi-Factor Authentication (MFA).
• Enforce least-privilege access across cloud, network, and endpoint environments.
• Support Microsoft Entra ID, Active Directory, and enterprise identity providers.
Security Operations
• Configure, monitor, and maintain SIEM, EDR, and XDR platforms.
• Implement centralized logging, log correlation, and continuous security monitoring.
• Investigate security alerts and suspicious activity.
• Support security incident triage, containment, eradication, recovery, and forensic investigations.
Vulnerability Management
• Conduct vulnerability assessments and security risk analyses.
• Coordinate remediation efforts across servers, workstations, applications, and cloud environments.
• Support automated patch management and security update processes.
• Validate remediation activities and maintain compliance with organizational security standards.
Cloud Security
• Secure AWS and Microsoft Azure cloud environments.
• Configure cloud identity controls, workload protections, encryption, and security services.
• Support secure cloud integrations and hybrid architectures.
• Implement cloud security best practices and continuous monitoring.
Compliance & Governance
• Support compliance with:
o NIST SP 800-53
o NIST SP 800-207 (Zero Trust)
o NIST Risk Management Framework (RMF)
o FISMA
• Participate in audits, security assessments, risk mitigation activities, and authorization efforts.
• Develop and maintain security policies, standards, and Standard Operating Procedures (SOPs).
Documentation & Collaboration
• Maintain system security documentation, configuration baselines, and asset inventories.
• Perform Root Cause Analysis (RCA) following security incidents.
• Support formal change management processes and security impact analyses.
• Collaborate with cloud, network, endpoint, and application engineering teams to improve enterprise security.
________________________________________
Required Qualifications
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field (or equivalent experience).
• Minimum 5 years of enterprise cybersecurity engineering experience.
• Experience implementing security controls aligned with NIST SP 800-53.
• Experience implementing Zero Trust Architecture in accordance with NIST SP 800-207.
• Strong experience with Identity and Access Management (IAM), RBAC, PAM, and MFA.
• Experience administering SIEM, EDR, and XDR platforms.
• Experience configuring centralized logging and continuous monitoring solutions.
• Experience conducting vulnerability assessments, remediation, and security risk analysis.
• Experience securing AWS and Microsoft Azure environments.
• Experience supporting incident response, forensic investigations, and security operations.
• Excellent analytical, troubleshooting, documentation, and communication skills.
________________________________________
Required Technical Skills
• NIST SP 800-53
• NIST SP 800-207
• Zero Trust Architecture
• Identity & Access Management (IAM)
• Microsoft Entra ID
• Active Directory
• RBAC
• PAM
• MFA
• SIEM
• EDR
• XDR
• Microsoft Sentinel
• Splunk
• AWS Security
• Microsoft Azure Security
• Cloud Security
• Vulnerability Management
• Continuous Monitoring
• Security Information and Event Management
• Incident Response
• Forensic Data Collection
• Network Segmentation
• Change Management
• Security Baselines
• Security Policies
• SOP Development
• PowerShell
• Python (preferred)
________________________________________
Preferred Certifications
Although the DOW does not mandate specific certifications, candidates possessing one or more recognized cybersecurity certifications are strongly preferred, including:
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• CompTIA Security+
• GIAC Security Essentials (GSEC)
• Microsoft Certified: Cybersecurity Architect Expert
• Microsoft Certified: Security Operations Analyst Associate
________________________________________
Preferred Experience
• Federal Government or DoD environments
• NIST Risk Management Framework (RMF)
• FISMA compliance
• FedRAMP environments
• Microsoft Defender XDR
• Microsoft Sentinel
• AWS Security Hub
• Microsoft Defender for Cloud
• Security automation and orchestration
• 24x7 Security Operations Center (SOC) environments
________________________________________
Why Join Horizon Global Partners?
At Horizon Global Partners, you’ll support mission-critical Federal Government programs by designing and implementing enterprise cybersecurity solutions that protect cloud, network, identity, and endpoint environments. You’ll work alongside experienced cybersecurity, cloud, and infrastructure professionals to build secure, resilient, and compliant systems supporting critical government operations.