Lead Cyber Security Analysis SME

XSI is seeking a Lead Cyber Security Analysis SME to anchor the cybersecurity engineering team supporting the Congressional Budget Office (CBO). This is a senior, hands-on engineering leadership role — not a policy, compliance, or SOC-monitoring position. You will lead technical implementation across the full security stack and own the Government-facing documentation that demonstrates control effectiveness. What you'll do Lead technical implementation across Zero Trust, IAM, SIEM/EDR/XDR, vulnerability management, cloud security, network segmentation, security baselines, and incident response.

Implement and maintain enterprise security controls aligned to NIST SP 800-53 and NIST SP 800-207 — access control, configuration management, system and communications protection, audit and accountability, incident response, and system and information integrity. Drive Zero Trust enforcement, continuous verification of users and devices, identity-centric security, and least-privilege access (RBAC, PAM, MFA). Oversee centralized logging and SIEM integration, vulnerability assessment, RMF-aligned risk analysis, system hardening, and AWS/Azure cloud security.

Support incident response, forensic data collection, root cause analysis (RCA), change management, and automated patching. Produce SOPs, security impact analyses, implementation plans, validation criteria, rollback steps, and audit-ready control evidence. Collaborate with network, cloud, application, and service desk teams to remediate risk and strengthen posture.