The Work:

• Serve as a security engineering SME for containerized environments, service mesh technologies and microservices. 
• Design, implement, and manage security controls for containerized workloads solutions, including image scanning firewalls, intrusion detection/prevention systems, endpoint protection, and encryption mechanisms, runtime protection, role-based access control (RBAC), and network segmentation to ensure the organization's networks and systems remain secure.
• Integrate security into CI/CD pipelines and DevSecOps workflows, ensuring compliance with RMF, NIST SP 800-53, ICD 503, and FedRAMP requirements.
• Configure and optimize security monitoring and logging solutions and work with container security tools such as Prisma Cloud or similar.
• Monitor network traffic, system logs, and security alerts to detect and respond to potential security incidents. Analyze and investigate anomalies and security breaches, taking appropriate actions to mitigate risks.
• Monitor and assess threat intelligence feeds, conduct threat analysis, and perform risk assessments to proactively identify emerging threats and vulnerabilities. 
• Collaborate with platform engineers, ISSOs, and developers, among other cross-functional teams, to establish, embed, and enforce security policies, standards, and procedures throughout the system lifecycle.
• Conduct regular security assessments of container orchestration platforms, microservices, and APIs to identify vulnerabilities and weaknesses in systems, networks, and applications and recommend mitigations.
• Develop and implement incident response plans to effectively address security breaches, incidents, and other security concerns.
• Work closely with cross-functional teams, including IT, software development, and compliance, to integrate security into all phases of the development lifecycle and ensure a comprehensive approach to cybersecurity.
• Maintain thorough and accurate documentation of security architecture processes, control implementation procedures, configurations, and continuous monitoring strategies. Prepare detailed reports on security findings, incidents, and actions taken.

What you’ll need: 

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 7+ years of experience as a cybersecurity engineer with a specialization in designing and building implementations of required security controls; and implementing continuous monitoring and auditing of solutions for compliance with security controls.
• Hands-on experience securing containerized/Kubernetes environments (OpenShift preferred).
• Strong skills in specifying and implementing log collection into tools such as Splunk, and performing querying and analysis of aggregated logs to identify security-relevant anomalies or risks
• Strong experience with designing and building implementations of required security controls (e.g., NIST SP 800-53, RMF, ICD 503, FISMA, FedRAMP); and implementing continuous monitoring and auditing of solutions for compliance with security controls.
• Experience with implementing controls for cloud, container, and DevSecOps services and solutions within IL5 to IL6+ environments.
• Strong understanding of network protocols, operating systems, and infrastructure components.
• Experience performing periodic (Daily, Weekly, Monthly) security checks to support continuous monitoring AI.

Bonus Points if you have: 

• Proficiency in incident response, security incident handling, and forensic analysis techniques.
• Experience with security tools such as Fortify, Acunetix, and Prisma Cloud
• Effective communication skills, with the ability to convey complex technical concepts to both technical and non-technical stakeholders.
• CISSP or equivalent certification to support DoD 8140 requirements

Eligibility Requirements: 

• Active TS//SCI clearance with Polygraph required.