Information Security Engineer

The Congressional Budget Office is a small nonpartisan agency that provides independent, objective economic and budget analysis to the Congress. The agency seeks a skilled and experienced Information Security Engineer to manage an effective program to protect its information systems.

Qualifications: Candidates must have 8 to 10 years of information technology experience, with at least 5 years of recent experience in conducting risk analysis, analyzing audit logs, developing a zero trust architecture, identifying system vulnerabilities, and performing threat hunting to proactively identify and mitigate risks. The most important requirement for this position is demonstrated expertise in a variety of security systems and technologies currently in place. Also required is recent experience with cloud security and advanced threat defense, firewall implementation and system penetration technology, malware detection, and network operating systems (the administration of Windows, Linux, or cloud operating systems is a plus). Experience with information technology security concepts, NIST 800-53 controls and requirements, and the MITRE ATT&CK framework is preferred, as is knowledge of the fundamentals of AI and machine learning. Candidates must also possess strong verbal and written communication skills, especially the ability to explain complex technical material clearly to senior staff, information systems professionals, and both technical and nontechnical users.