Senior Risk Engineer Jobs in Maryland (NOW HIRING)

Cinteot Inc. is a small IT services company that specializes in cybersecurity, Big Data/databases, software development, systems testing, STIG Compliance training, closed‑circuit television/security cameras and access controls, and construction/facilities.

We are a Woman-owned, SBA Certified 8(a), and HUBZone company.

Locations: Washington, District of Columbia; Riverdale Park, Maryland; Reston, Virginia.

Job Summary: As a Forescout Cyber Security Engineer at Cinteot, you will play a critical role in safeguarding our information technology infrastructure. Your expertise will be essential in managing cybersecurity controls and enhancing our detection capabilities within a collaborative team environment.

• Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management.
• Manage infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
• Contribute to risk and vulnerability assessments in network, system, and application areas, leveraging big data analytics to identify advanced threats or indicators of compromise.

• 5+ years of experience performing systems administration for Windows or Linux, including troubleshooting, installation, configuration, and security upgrades.
• Experience architecting and designing IP networks, with the ability to develop and document network topologies.
• Knowledge of multi-domain architectures, including data center, WAN, and LAN in virtualized environments.
• TS/SCI clearance with the ability to obtain a counterintelligence (CI) polygraph.
• Associate's degree with 5+ years of experience, Bachelor's degree with 3+ years, or Master's degree with 1+ year of experience supporting IT projects. Experience may be accepted in lieu of a degree.
• DoD 8570 IAT Level II Certification, including Security+ CE, CCNA‑Security, GSEC, SSCP, CySA+, GICSP, or CND Certification.
• Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure Support Certification (CSSP‑IS) prior to the start date.

• Experience with deployment or daily maintenance of Forescout CounterACT appliances.
• Knowledge of federal information security policies, standards, and risk management processes for enterprise systems.
• Ability to install and deploy Forescout in customer environments.
• Ability to integrate Cybersecurity data using enterprise or custom data aggregation and analysis tools, including Splunk.
• Ability to provide support in a Tier II IT operations and maintenance role.
• Self‑starter with excellent verbal and written communication skills.

• Health Insurance
• Vision Insurance
• Paid Time Off (PTO)
• 401(k) Matching
• Paid Holidays
• Life Insurance

• Deploy and manage DevOps processes and tools to enhance system performance and reliability.
• Collaborate with cross‑functional teams to define and implement automation strategies.
• Utilize scripting languages for configuration management and automation tasks.
• Ensure the security and integrity of systems through compliance with best practices.
• Maintain documentation for system configurations and processes.

• 5+ years of experience in Linux, scripting/software development, and configuration management.
• Proficiency in Python, Perl, Korn, Bourne/Bash, Ansible, and other shell scripting.
• Experience with revision control software (CVS, SVN, Git, GitLab, GitLab CI).
• Demonstrated ability to manage and develop DevOps deployment automation processes.
• Security+ Certification is required.

• Comprehensive insurance coverage including medical, dental, and vision.
• 401(k) plan with company contributions.
• Generous paid time off policy.

• Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management.
• Implement infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
• Perform risk and vulnerability assessments in network, system, and application areas and leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise.
• Participate in the development of test strategies and conduct of testing, validating, and implementing applicable STIG requirements for current or new systems.
• Conduct periodic self‑assessments of systems to ensure STIG compliance and create STIG checklists to support periodic self‑assessments.
• Perform Information Assurance Vulnerability Management (IAVM) activities such as IA vulnerability alerts, bulletins, and tasking orders and develop a systematic approach for responses to IAVM related issues to maintain system compliance.

• 7+ years of experience implementing, testing, and validating STIGs, performing system self‑assessments, and creating STIG checklists.
• 7+ years of experience executing IAVM actions, such as IAVA alerts, bulletins, or tasking orders, and developing compliant engineering responses.
• 7+ years of experience deploying and validating ESS, ACAS, and CMRS, analyzing ACAS scans, developing remediation strategies, and implementing patches and upgrades.
• 7+ years of experience reviewing cybersecurity and engineering change requests to ensure operational availability and compliance.
• Knowledge of RMF and its application to networks and IT systems, such as Cisco routers, switches, Active Directory, or access control.
• Ability to manage users in Windows or Linux and administer VMs in VMware or Hyper‑V.
• Ability to accredit and secure DoD systems using RMF, perform IAVA analysis, document POA&Ms, and prepare security assessment artifacts.
• HS diploma or GED.
• Security+ Certification.

• Possession of excellent verbal and written communication skills.
• Cybersecurity Certification, such as CISSP or Certified Ethical Hacker Certification, or Networking Certification, such as Network+ or Cisco Certification.

• Design and execute test plans and test cases for software applications.
• Identify, document, and track software defects and issues.
• Collaborate with developers to ensure quality throughout the software development lifecycle.
• Participate in Agile ceremonies and contribute to continuous improvement efforts.
• Assist in the development of automated testing solutions.

• Bachelor's degree from an accredited college in science and technology related disciplines such as Mathematics, Computer Science, Systems Engineering, Electrical Engineering, Computer Engineering, Physics, Information Technology, Management Information Systems, Cyber Security or related discipline.
• Must be a US Citizen; this position will require obtaining a government security clearance.

• Knowledge of basic software practices such as object‑oriented programming, coding standards, unit testing, relational databases, and system administration.
• Familiarity with Agile Development Process is a plus.
• Strong communication skills and ability to work effectively in a team environment.
• Complete Insurance Coverage.
• 401(k) with Company Contribution.
• Tuition Reimbursement.
• Generous Paid Time Off.

At Cinteot, we foster a culture of collaboration, innovation, and continuous learning. We believe in empowering our employees to grow both personally and professionally in a supportive environment. Our flexible schedules, competitive pay, and comprehensive benefits enable a healthy, fulfilling life at and outside of work. We emphasize empowering our employees by fostering innovation and integrity while exemplifying corporate responsibility.

Cinteot is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, sex, color, religion, sexual orientation, gender identity, national origin, protected veteran status, or on the basis of disability.