Cyber Security Engineer

About Us:

PUNCH Cyber Analytics Group (PUNCH) is a Virginia-based, small business founded in 2012 operating as a cohesive team that incorporates the sum of our group’s diverse skills, talents, and resources toward our collective passion: advancing data analytics to impact cyber operations. PUNCH is a two-time Inc. Magazine ‘Best Workplaces’ awardee offering unique benefits and personal touches to provide a positive work-life experience for our team. PUNCH brings unique qualifications, resources, and past-performance that make us suitable to address the goals of our diverse customer-base. Further, we have past and current experience supporting cyber operations and cyber ML-based research, with well over 100 years of collective experience from our collaborative, multi-disciplinary team.
Responsibilities

• Define and maintain the organization’s Zero Trust security architecture and strategy aligned with business and security objectives.
• Provide recommendations regarding the Agency's perimeter UTM devices IAW NIST 800-53 and industry best practices for Cisco, Juniper, Riverbed, and Fortinate
• Develop Zero Trust roadmaps, maturity models, and implementation plans across people, processes, applications, data, devices, and infrastructure.
• Establish identity-centric security controls, including strong authentication, MFA, SSO, identity governance, and least-privilege access.
• Design network segmentation and micro-segmentation to limit lateral movement and reduce attack surfaces.
• Implement continuous verification of users, devices, workloads, applications, and network connections rather than relying on implicit trust.
• Define policy-based access controls using identity, device posture, risk, location, application, and behavioral signals.
• Establish device trust and endpoint security requirements, including device compliance, health checks, encryption, patching, and EDR coverage.
• Develop data-centric security controls, including data classification, encryption, DLP, access governance, and rights management.
• Define security telemetry and continuous monitoring requirements to support real-time risk-based access decisions.
• Integrate Zero Trust controls with cloud, hybrid-cloud, SaaS, on-premises, and multi-cloud environments.
• Assess existing infrastructure against Zero Trust maturity frameworks and reference architectures, such as NIST Zero Trust Architecture.
• Identify security gaps, vulnerabilities, architectural risks, and legacy dependencies that prevent Zero Trust adoption.
• Create architecture standards, patterns, reference designs, and security requirements for engineering and project teams.
• Continuously evolve the architecture based on new threats, technologies, business requirements, and emerging Zero Trust capabilities.

Minimum Qualifications:

To be considered for this position, you must minimally meet the knowledge, skills, and abilities listed below:

· 7 years of experience with a bachelor’s degree or 9 years of total experience

· Ability to work in both an individual and team environment

· Flexibility to support after hours maintenance activities

Must be able to obtain a Position of Public Trust