Senior Security/Threat Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Direct the functions of enterprise threat monitoring, detection engineering, and cybersecurity analytics.

• Supervise ACAS/Nessus scanning operations, analyze vulnerability trends and severity, and coordinate remediation efforts.

• Oversee SIEM alerting, log correlation, advanced query creation, and fine-tuning of threat detection.

• Perform threat hunting to uncover unusual behavior, identify emerging threats, or detect latent indicators of compromise.

• Ensure the implementation of STIG, verify patch compliance, and maintain secure configuration baselines across systems.

• Implement and uphold the Continuous Monitoring Plan, which includes scheduling scans, reporting cycles, and compliance assessments.

• Create detection rules, dashboards, and analytic models to enhance situational awareness and minimize dwell time.

• Assist in incident response efforts, including triage, containment, forensic analysis, and planning for corrective actions.

• Provide engineering teams with risk-based recommendations based on identified vulnerabilities, misconfigurations, or threat trends.

• Generate threat intelligence summaries, vulnerability reports, and continuous monitoring outputs for government stakeholders.

• Collaborate with cloud engineers, ISSOs, DevSecOps teams, and cybersecurity analysts to ensure a secure operational environment.

• Enhance automation for monitoring, scanning, log analysis, and cybersecurity reporting.

• Guide junior analysts and enhance enterprise detection and response capabilities.

⛳️ Requirements

• Must possess an active Top Secret clearance, validated by a Tier 5 background investigation.

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, Information Technology, or a related discipline.

• At least 10 years of experience in cybersecurity, threat detection, or vulnerability management.

• Proven experience in leading enterprise monitoring, threat analysis, SIEM operations, or vulnerability programs.

• Familiarity with conducting ACAS/Nessus scans, ensuring STIG compliance, and confirming patch levels.

• Experience in performing threat hunting, log analysis, and incident response tasks.

• Background in developing detection rules, analytic patterns, or SIEM dashboards.

• Experience coordinating with cloud, operations, and engineering teams to address high-risk findings.

• In-depth knowledge of SIEM platforms, log analytics, threat detection, and correlation methodologies.

• Strong understanding of ACAS, Nessus scanning, STIG requirements, and vulnerability remediation processes.

• Familiarity with NIST SP 800-53, RMF continuous monitoring standards, and DoD cybersecurity regulations.

• Experience with cloud-native security monitoring tools and continuous monitoring frameworks.

• Knowledge of network security, behavioral analytics, and methodologies for threat hunting.

• Required certification: CISSP, CCSP, or Security+.

• Excellent analytical and investigative skills for identifying, triaging, and addressing threats.

• Strong communication skills to present threat summaries and vulnerability findings to stakeholders.

• Capability to lead monitoring and vulnerability management initiatives with minimal oversight.

• High attention to detail and accuracy in analyzing security data and documentation.

• Ability to juggle multiple priorities and respond swiftly in a critical mission environment.

🏝️ Benefits

• Regular full-time employment.

• Equal Employment Opportunity and Affirmative Action protections.

• Pay transparency protections.

• Resume and personal information reviewed for comparable roles with subsidiaries, affiliates, and teaming partners.