Threat Detection and Vulnerability Managment Cybersecurity Engineer

POSITION SUMMARY We are seeking a hands-on Threat Detection and Vulnerability Management Cybersecurity Engineer to strengthen the organization's cybersecurity posture through proactive threat analysis, penetration testing, security engineering, and enterprise vulnerability management. This role is responsible for managing the full vulnerability lifecycle�from discovery and validation through risk prioritization, remediation, verification, and continuous monitoring�while defending enterprise systems against evolving cyber threats. The ideal candidate is an experienced security engineer with a proven ability to investigate threats, validate vulnerabilities, implement and verify security controls, and collaborate with technical teams to strengthen enterprise security. This role requires hands-on experience applying NIST RMF, NIST 800-53, DISA STIGs, and other federal cybersecurity frameworks through technical implementation, vulnerability remediation, authorization support, threat hunting, penetration testing, and continuous improvement of security controls. This is an onsite position based in Washington DC. Primary Responsibilities Manage the full vulnerability management lifecycle, including discovery, technical validation, risk prioritization, remediation planning, remediation verification, and continuous monitoring across enterprise systems Lead, perform and support penetration testing activities against applications, infrastructure, cloud environments, and enterprise systems. Perform credentialed and non-credentialed vulnerability assessments using enterprise platforms such as Tenable, Nessus, Qualys, Rapid7, or equivalent technologies. Validate vulnerabilities through technical testing to determine exploitability, verify remediation effectiveness, and reduce organizational risk. Partner with infrastructure, cloud, networking, and application teams to implement corrective actions and strengthen enterprise security. Develop automation and scripting solutions to improve vulnerability management, compliance validation, reporting, and operational efficiency. Perform proactive threat hunting, threat detection, threat analysis, and incident response using SIEM, EDR/XDR, endpoint telemetry, and network security tools. Develop, tune, and maintain detection rules, correlation searches, dashboards, alerts, and monitoring capabilities to improve visibility and reduce false positives. Analyze attacker tactics, techniques, and procedures (TTPs) using MITRE ATT&CK and threat intelligence to strengthen detection and response capabilities. Support incident investigations through technical analysis, root cause determination, containment, and remediation recommendations. Utilize tools such as Burp Suite, Metasploit, Nmap, Kali Linux, or similar security testing platforms to validate vulnerabilities and security controls. Participate in red team, blue team, and purple team exercises to evaluate security posture and improve defensive capabilities. Verify corrective actions by reproducing findings and confirming vulnerabilities have been successfully remediated. mplement, assess, and validate technical security controls in accordance with NIST RMF, NIST 800-53, DISA STIGs, and organizational security requirements. Support Authority to Operate (ATO) activities by providing technical evidence, validating security controls, supporting POA&M development, and verifying corrective actions. Perform continuous monitoring to ensure security controls remain effective throughout the system lifecycle. Develop and maintain technical documentation, standard operating procedures (SOPs), implementation guides, and assessment artifacts supporting operational effectiveness and audit readiness. Required Experience and Qualifications Bachelor�s degree in Cybersecurity, Computer Science or related field and 8+ years of experience in cybersecurity engineering, threat detection, or related field (12+ without degree). Demonstrated experience managing the full vulnerab…