Senior Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Provide architectural and design oversight to ensure that enterprise security requirements are fulfilled across all systems.

• Act as a Subject Matter Expert in enterprise security architecture, ensuring that designs are in line with mission, business, and compliance requirements.

• Convert organizational security objectives into technical specifications for infrastructure and applications.

• Assess the effectiveness of the enterprise cybersecurity architecture and propose enhancements.

• Supervise the deployment, configuration, and management of enterprise security platforms, which include SIEM, IDS/IPS, logging, UAM, EDR, SOAR, Elastic Search, and encryption technologies.

• Evaluate, test, select, and integrate security tools with a focus on scalability and automation.

• Conduct security assessments and evaluations for new platforms and integrations.

• Execute vulnerability scanning, analysis, and reporting to uncover enterprise security weaknesses.

• Suggest mitigations and monitor remediation efforts across teams.

• Ensure effective practices in system hardening, patch management, and configuration management.

• Collaborate with SOC and Incident Response teams to triage, investigate, and address threats.

• Identify unusual activity and potential threats through logs, network data, and defensive tools.

• Develop and enhance content for SIEM and cyber defense platforms.

• Create dashboards and reports to increase visibility into the organization's security posture.

• Develop and maintain automated scripts and processes for monitoring, alerting, and remediation.

• Conduct health checks on systems, applications, and security services to ensure their availability.

• Recommend emerging technologies to bolster detection and response capabilities.

• Oversee enterprise ICAM implementations, including multi-factor authentication and least privilege models.

• Provide expertise on authentication and authorization protocols such as SAML, OAuth2, and PKI.

• Ensure adherence to NIST, ISO 27001, FedRAMP, HIPAA, and other relevant frameworks.

• Develop and enforce security policies, STIGs, and hardening guidelines.

• Provide documentation, audit support, and compliance reporting to leadership.

• Work alongside developers and system architects to integrate security into the systems development lifecycle.

• Conduct security reviews, testing, and evaluations during system development and release cycles.

• Maintain protected repositories of technical documentation, artifacts, and system configurations.

• Offer training and security awareness sessions for technical teams and stakeholders.

• Collaborate with IT, DevOps, and Engineering teams to integrate security into daily operations.

⛳️ Requirements

• Bachelor's degree in Information Technology, Cybersecurity, Data Science, Information Systems, Computer Science, or a related field from an ABET-accredited or CAE-designated institution.

• A minimum of six (6) years of experience in Information Technology (IT) and/or Information Security (IS).

• Must hold at least one DoD 8140 certification relevant to the role or obtain certification within six (6) months of onboarding.

• Required to maintain the necessary DoD 8140 certification(s) throughout employment.

• Must successfully complete a DEA background investigation.

• Must possess an active Secret clearance (or higher) and be eligible for a Top Secret clearance if needed.

• Advanced certifications aligned with DCWF Roles 521, 461, 651, or 622, including:

• - ISC2: CISSP-ISSAP, CISSP-ISSEP, CCSP, CSSLP, SSCP

• - EC-Council: CEH

• - GIAC: GCIA, GCLD, GICSP, GCSA, GSNA, GDSA, GFACT, GISF, GSEC

• - CompTIA: CySA+, PenTest+, Security+, SecurityX/CASP+

• In-depth understanding of SIEM platforms, scripting languages (Python, SPL, KQL), network security, and threat intelligence.

• Practical experience with Splunk, Elastic Search, and ServiceNow.

• Familiarity with APIs, webhooks, and custom queries for data ingestion.

• Strong cloud security experience in multi-cloud enterprise environments (AWS and/or Azure).

• Experience in migrating applications to cloud environments and implementing cloud security controls.

• Knowledge across the DevOps lifecycle, including orchestration, configuration management, CI/CD, monitoring, and security.

• Experience using automation and orchestration technologies such as GitHub Actions, Jenkins, CircleCI, Ansible, Azure DevOps, GitLab CI, and Bitbucket Pipelines.

• Scripting and automation experience using PowerShell, Azure CLI, or similar technologies.

🏝️ Benefits

• Competitive salary with performance-based bonuses.

• Comprehensive health, dental, and vision insurance packages.

• Generous paid time off and flexible work schedules.

• Opportunities for professional development and continuous learning.

• Retirement savings plans with employer matching.