Profiles · 1 day ago
Senior Cybersecurity Engineer
Profiles, a leader in the nonprofit industry, is hiring a Senior Cybersecurity Engineer in Alexandria, VA. The role involves leading enterprise cybersecurity compliance programs, managing risk and compliance operations, and mentoring junior staff within a flexible hybrid work model.
Responsibilities
Lead enterprise cybersecurity compliance programs across CMMC, FedRAMP, SCRM, ISO 27001:2022, and NIST frameworks
Manage risk and compliance operations including monthly reporting, KPI dashboards, audits, POA&M reviews, and security assessments
Oversee RMF documentation, DoD authorization processes (ATO/IATT/IATO), and cloud security controls across AWS, Azure, and O365
Develop and maintain security policies, technical standards, COOP programs, incident response procedures, and disaster recovery plans
Mentor and supervise junior cybersecurity staff while serving as a primary interface with auditors, federal agencies, and internal stakeholders
Qualification
Required
US Citizenship and the ability to obtain/maintain a security clearance; on-site presence required in Alexandria, VA
Bachelor's degree in Cybersecurity, Computer Science, or related field (or equivalent experience)
7+ years of cybersecurity engineering experience with 5+ years leading enterprise compliance and risk management efforts
Extensive knowledge of NIST 800-171/53, RMF, CMMC, FedRAMP, and DoD security frameworks
Experience with vulnerability scanning tools (ACAS, Nessus, Rapid7, Qualys) and Office 365 security configurations
Benefits
Flexible hybrid work model with up to two remote days per week after the 90-day introductory period.
Generous professional growth support, including paid certifications, tuition reimbursement, and continuous training.
Robust time-off program, plus the opportunity to work for an organization recognized as a •Top Workplace• by The Washington Post and Washingtonian.