Job Title: Security Operations Engineer – Senior

Location: Washington, DC

(Due to the nature of the work and contract requirements, U.S. Citizenship is required.)

C3EL is seeking a Senior Security Operations Engineer to support security initiatives in Washington, DC. This role is responsible for designing, implementing, and maintaining secure systems and ensuring the protection of organizational assets. The selected candidate will provide technical leadership across security architecture, risk management, and continuous monitoring efforts.

Responsibilities will include, but not be limited to:

• Design, implement, and maintain cybersecurity solutions aligned with industry frameworks (e.g., NIST, ISO 27001).
• Perform vulnerability assessments, security control reviews, and risk analyses.
• Monitor systems for security incidents and support incident response and remediation efforts.
• Develop and enforce security policies, procedures, and best practices.
• Configure and manage security tools (e.g., SIEM, IDS/IPS, endpoint protection).
• Collaborate with engineering teams to integrate security controls into system architectures.
• Conduct security audits and support continuous monitoring activities.
• Maintain security documentation, including system security plans and risk tracking.
• Provide technical guidance to junior cybersecurity staff.

• U.S. Citizenship.
• Current IAT Level III or IAM Level II certification (e.g., CISSP, CASP+ CE, or equivalent).
• 8+ years of experience in cybersecurity, information security, or a related field.
• Experience with risk management frameworks (e.g., RMF, NIST-based approaches).
• Experience with vulnerability assessment tools (e.g., Nessus or similar).
• Knowledge of security architecture and network security principles.
• Experience with security tools such as SIEM, IDS/IPS, and endpoint protection.
• Familiarity with Windows, Linux, and cloud environments (AWS, Azure, or similar).
• Strong analytical, troubleshooting, and communication skills.

Desired Qualifications:

• Experience in enterprise environments.
• Familiarity with compliance and risk tracking tools.
• Experience with Zero Trust concepts.
• Scripting or automation experience (e.g., Python, PowerShell).
• Experience with DevSecOps or container security.