Information Security Engineer

The Congressional Budget Office is a small nonpartisan agency that provides independent, objective economic and budget analysis to the Congress. The agency seeks a skilled and experienced Information Security Engineer to manage an effective program to protect its information systems.

The information security engineer develops and applies the tools and approach necessary to protect CBO's network and computer systems. This position involves a composite of engineering expertise with hands-on incident response and security analysis. The successful candidate will design, configure, and optimize security tools to enhance detection and response capabilities. This role requires an in-depth understanding of cybersecurity principles and incident response procedures and the ability to work in a fast-paced environment. Specific duties include the following: Leading and participating in investigations of security incidents and ensuring rapid containment and remediation. Designing, implementing, and fine-tuning security tools and solutions, including Checkpoint EDR, CheckPoint VPN, iBoss, QRadar, and other security platforms. Developing and maintaining detection rules, alerts, and dashboards to improve visibility and threat detection. Integrating and optimizing threat intelligence feeds to enhance correlation and alerting capabilities. Troubleshooting and resolving performance issues with security tools and systems. Actively monitoring and managing security events, responding to alerts from SIEM and security tools. Aligning engineering and operations activities with federal requirements such as NIST 800-53, FISMA, and FedRAMP. Evaluating and recommending enhancements to security tools and processes. Staying current with emerging threats, vulnerabilities, and industry best practices to continuously evolve the security environment. Keeping track of tasks to ensure they are completed efficiently.

US citizenship or current permanent residents seeking citizenship. Candidates must be able to obtain and maintain a top-secret security clearance.

A bachelor's degree in computer science, information technology, cybersecurity, or a related field is preferred. CISSP, CISM, CompTIA Cloud+, Security+, Pen Test, and/or other applicable certifications are desirable.