Agencies get assessed against the NIST Cybersecurity Framework, the CIS Controls, and, where criminal justice data is involved, the CJIS Security Policy. This role does the engineering behind those findings rather than only the finding.

What you will do

Run security assessments and produce findings ordered by risk, with remediation an agency can actually schedule.
Design and implement identity, access, and segmentation improvements, including phishing-resistant authentication.
Support compliance work against CJIS, HIPAA, PCI, and the applicable NIST control families.
Build detection and logging around the questions an agency will be asked after an incident.
Run tabletop exercises for outages as well as breaches, with the people who would actually be in the room.
Review vendor security questionnaires and architectures on the agency side of the table.

What we are looking for

Four or more years in security engineering or a closely related role.
Hands-on work with identity, endpoint, network, and cloud security controls.
Working knowledge of at least one major control framework.
Ability to write a finding that a non-technical executive can act on.
Incident response participation, not only theory.
Willingness to hold a position under commercial pressure.

Helpful to have

CJIS experience or prior work with a criminal justice agency.
Operational technology security in utilities or public works.
Security certification such as CISSP, GIAC, or equivalent depth.
Experience with StateRAMP or FedRAMP assessment support.

Screening and eligibility

This position may require fingerprint-based background screening under the CJIS Security Policy before access to customer systems is granted. Some customer programs require United States citizenship. Eligibility is confirmed before assignment, not at application.

Compensation

HQT provides the pay scale for this position on request, and states it in any written offer.

How to apply

Send a resume to careers@hqt.org with the position title in the subject line.

HQT LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. HQT participates in E-Verify. Reasonable accommodations are available upon request.

Cybersecurity Engineer