Cyber Security Engineer

Cyber EngineerLocation: Washington, D.C. (4 days onsite, telework Fridays)Clearance: Ability to obtain (if required)Employment Type: Full-timeCompany Description:Big Impact Tech (BIT) provides IT and business consulting services to federal and commercial clients, specializing in cybersecurity, cloud, data, and program management.Role Overview:We are seeking a Cyber Engineer to support enterprise cybersecurity operations, application security, and incident response. This role focuses on securing applications and infrastructure while supporting SOC activities and ensuring compliance with federal standards.Responsibilities:Support SOC operations, incident response, and security reportingPerform vulnerability identification, triage, and remediationConduct SAST/DAST and application security testing (e.g., Veracode, Burp Suite, OWASP ZAP)Implement security controls across applications, systems, and networksSecure web applications aligned with OWASP Top 10 and industry frameworks (CWE, CVSS, SANS 25)Integrate security into development pipelines (Eclipse, JDeveloper, Visual Studio)Automate tasks using bash scripting and tools like SeleniumOperate within Linux/UNIX environmentsEnsure compliance with NIST, FIPS, and FedRAMP standardsQualifications:Experience in SOC operations and incident responseHands-on experience with application security tools (SAST, DAST, IAST)Knowledge of vulnerability management and OWASP frameworksExperience with scripting (bash) and automation tools (e.g., Selenium)Familiarity with Linux/UNIX systems and NIST Cybersecurity FrameworkAbility to obtain a security clearance, if neededRequirements:Bachelor’s degree or equivalent experience6+ years of IT experience3+ years in application security or SAST/DAST environmentsExperience implementing enterprise security controlsWorking knowledge of programming languages (Java, Python, .NET, or C#)