Position Overview
The Security Engineer is responsible for applying deep cybersecurity, security engineering, and cyber operations expertise to support federal client missions. This role conducts technical analysis, prototypes security solutions, and recommends best‑practice changes to strengthen enterprise security posture. The Security Engineer blends threat analysis, cyber operations insight, and enterprise security tooling experience to translate risk, policy, and investigative findings into actionable engineering and architectural requirements aligned with Zero Trust principles. The position requires strong communication, research ability, creativity, collaboration, and technical breadth to deliver secure, practical, and cost‑effective IT solutions for complex federal environments.

Key Responsibilities

• Perform technical analysis and develop prototype solutions to support cybersecurity improvements.
• Translate investigative insights, risk assessments, and policy requirements into actionable engineering and architectural recommendations.
• Develop secure technical solutions aligned with Zero Trust architecture and federal security standards.
• Utilize enterprise security tools, analytics platforms, and cyber operations methods to assess and enhance mission security.
• Conduct research to identify emerging threats, technologies, and best practices relevant to federal security environments.
• Collaborate with cross‑functional teams—including cyber operations, engineering, and leadership—to design security solutions.
• Lead or support teams delivering cybersecurity engineering workstreams.
• Recommend security process enhancements, architecture updates, and operational improvements.
• Provide expert guidance on federal security requirements, cybersecurity processes, and compliance frameworks.
• Prepare documentation, technical findings, and recommendations for client leadership.

Required Qualifications

• 7 years of experience in cybersecurity, security engineering, or cyber operations.
• 7 years of experience working with security tools, analytics platforms, and processes supporting federal cybersecurity programs.

Preferred Qualifications

• Must possess—or obtain within 6 months—Security+ CE or an equivalent DoD 8570‑compliant security certification
• Demonstrated ability to translate risk, policy, and investigative insights into engineering and architectural requirements.
• Strong communication, collaboration, problem‑solving, and analytical skills.
• Ability to research, design, and recommend secure, practical, and cost‑effective IT solutions.
• Experience with Zero Trust implementations or Zero Trust‑aligned architectures.
• Experience with enterprise security tools, logging/analytics platforms, or cyber threat analysis workflows.
• Background supporting DoD, Intelligence Community, or highly regulated federal security missions.
• Experience creating prototypes or engineering proof‑of‑concept solutions.

Clearance Requirements

• Must possess an active TS/SCI clearance.

The Senior Cyber Security Engineer will design, develop, and maintain reusable frameworks, libraries, APIs, and reference implementations for zero trust authentication and authorization.

Responsibilities:

• Create developer guides, documentation, and best practices to enable smooth integration with security services. Implement and support fine-grained authorization patterns (entitlements, row-level security, ABAC).
• Collaborate with architects and engineers to ensure security services meet performance, usability, and compliance requirements.
• Conduct code reviews and provide guidance to development teams on secure coding and integration practices.
• Research emerging zero trust and identity/access management technologies to recommend improvements.

Here's what you need:

• 7 years of experience as a cybersecurity engineer with a specialization in designing and building implementations of required security controls; and implementing continuous monitoring and auditing of solutions for compliance with security controls.
• Strong skills in specifying and implementing log collection into tools such as Splunk, and performing querying and analysis of aggregated logs to identify security-relevant anomalies or risks
• Strong experience in implementing security controls from government regulatory frameworks and security standards (e.g., NIST SP 800-53, RMF, ICD 503, FISMA, FedRAMP).
• Experience with implementing controls for cloud, container, and DevSecOps services and solutions within IL5 to IL6+ environments.
• Strong understanding of network protocols, operating systems, and infrastructure components.
• Proficiency in incident response, security incident handling, and forensic analysis techniques.
• CISSP or equivalent certification to support DoD 8140 requirements

Bonus points if you have:

• Expert proficiency in incident response, security incident handling, and forensic analysis techniques.
• Expertise with security tools such as Fortify, Acunetix, and Prisma Cloud
• Experience performing periodic (Daily, Weekly, Monthly) security check to support continuous monitoring aligned with the NIST Risk Management Framework
• Experience applying Security Technical Implementation Guide (STIG) requirements to harden information systems (Linux Preferred)
• Effective communication skills, with the ability to convey complex technical concepts to both technical and non-technical stakeholders.
• CISSP or equivalent certification to support DoD 8140 requirements

Eligibility Requirements:

• Requires an active TS/SCI and polygraph