{"id":2452915,"url":"https://alion.io/job/punch-cyber-cyber-security-engineer","title":"Cyber Security Engineer","company":{"id":695911,"name":"Punch Cyber","domain":"punchcyber.com","url":"https://alion.io/company/punchcyber","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Breezy","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":145000,"max_usd":258000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":95},"experience_years_min":9,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DLP","optional":false},{"name":"Least Privilege","optional":false},{"name":"NIST 800-53","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-13T14:02:53Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-14T15:59:25Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"About Us:\nPUNCH Cyber Analytics Group (PUNCH) is a Virginia-based, small business founded in 2012 operating as a cohesive team that incorporates the sum of our group’s diverse skills, talents, and resources toward our collective passion: advancing data analytics to impact cyber operations. PUNCH is a two-time Inc. Magazine ‘Best Workplaces’ awardee offering unique benefits and personal touches to provide a positive work-life experience for our team. PUNCH brings unique qualifications, resources, and past-performance that make us suitable to address the goals of our diverse customer-base. Further, we have past and current experience supporting cyber operations and cyber ML-based research, with well over 100 years of collective experience from our collaborative, multi-disciplinary team.\nResponsibilities\nDefine and maintain the organization’s Zero Trust security architecture and strategy aligned with business and security objectives.\nProvide recommendations regarding the Agency's perimeter UTM devices IAW NIST 800-53 and industry best practices for Cisco, Juniper, Riverbed, and Fortinate\nDevelop Zero Trust roadmaps, maturity models, and implementation plans across people, processes, applications, data, devices, and infrastructure.\nEstablish identity-centric security controls, including strong authentication, MFA, SSO, identity governance, and least-privilege access.\nDesign network segmentation and micro-segmentation to limit lateral movement and reduce attack surfaces.\nImplement continuous verification of users, devices, workloads, applications, and network connections rather than relying on implicit trust.\nDefine policy-based access controls using identity, device posture, risk, location, application, and behavioral signals.\nEstablish device trust and endpoint security requirements, including device compliance, health checks, encryption, patching, and EDR coverage.\nDevelop data-centric security controls, including data classification, encryption, DLP, access governance, and rights management.\nDefine security telemetry and continuous monitoring requirements to support real-time risk-based access decisions.\nIntegrate Zero Trust controls with cloud, hybrid-cloud, SaaS, on-premises, and multi-cloud environments.\nAssess existing infrastructure against Zero Trust maturity frameworks and reference architectures, such as NIST Zero Trust Architecture.\nIdentify security gaps, vulnerabilities, architectural risks, and legacy dependencies that prevent Zero Trust adoption.\nCreate architecture standards, patterns, reference designs, and security requirements for engineering and project teams.\nContinuously evolve the architecture based on new threats, technologies, business requirements, and emerging Zero Trust capabilities.\nMinimum Qualifications:\nTo be considered for this position, you must minimally meet the knowledge, skills, and abilities listed below:\n· 7 years of experience with a bachelor’s degree or 9 years of total experience\n· Ability to work in both an individual and team environment\n· Flexibility to support after hours maintenance activities\nMust be able to obtain a Position of Public Trust","description_format":"text","description_chars":3143,"description_truncated":false,"requirements":{"experience_years_min":9,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Homeland Security"],"lifecycle":[{"event":"open","at":"2026-10-13T15:17:08Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":43,"reasons":["conf:3","win:early"],"computed_at":"2026-10-14T06:34:16Z"},"pay":null,"html_url":"https://alion.io/job/punch-cyber-cyber-security-engineer","json_url":"https://alion.io/job/punch-cyber-cyber-security-engineer.json","meta":{"generated_at":"2026-10-14T16:42:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21207,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":695911},"rest":"https://alion.io/mcp/rest/get_company?id=695911"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpunch-cyber-cyber-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpunch-cyber-cyber-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpunch-cyber-cyber-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/punch-cyber-cyber-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpunch-cyber-cyber-security-engineer"}]}