We are seeking a highly skilled Security Engineer to join our team supporting Department of Defense (DoD) programs. This role is responsible for architecting, engineering, and deploying advanced cybersecurity solutions while ensuring compliance with Risk Management Framework (RMF), Joint Special Access Program Implementation Guide (JSIG), and related regulatory standards. The ideal candidate combines hands-on engineering expertise with deep knowledge of cloud technologies, system security, vulnerability management, incident detection/response, and authorization-to-operate (ATO) processes.

What you’ll do:

• Support, administer, and maintain cybersecurity tools and platforms, including:
  • Splunk Enterprise: clustered system administration, deployment, data onboarding, CIM alignment, dashboards, alerts, etc.
  • Nessus/ACAS: Tenable Nessus Manager and Security Center - system administration, deployment, scan management
  • Evaluate-STIG and/or SCAP Compliance Checker
  • Microsoft Defender and/or Trellix (ePO)
• Integrate ancillary monitoring and assessment tools into SIEM
• Enable “security-as-code” via automation with Ansible, Terraform, PowerShell, Bash, or Python
• Contribute to incident detection and response, including developing detections, improving telemetry, tuning alerts, and supporting investigation efforts
• Select, architect, develop, and deploy solutions supporting vulnerability management, auditing, logging, patch management, and risk remediation across enterprise and cloud-hosted environments
• Engineer and implement security requirements for DoD cloud environments (AWS, Azure) in accordance with RMF and JSIG
• Perform advanced engineering to improve system security posture, including access control (least privilege), configuration baselines, and endpoint security
• Partner with ISSM/ISSO on RMF A&A activities, SSP updates, ConMon, control ownership/inheritance, and audit preparation
• Develop and maintain key technical documentation (SOPs, runbooks, architectural designs, etc.)
• Mentor teams on secure design principles and provide recommendations for complex system architectures

What you’ll need:

• Security+ (Or equivalent DoD IASAE Level II certification)
• 3 years of experience in a security engineering or similar role (e.g.: DevOps or security background, etc.) 
• Hands-on experience with SIEM (e.g.: administration, data normalization, data pipelines, alerting, and/or correlation)
• Experience with Windows and/or Linux (RHEL preferred)
• Expertise in cybersecurity engineering disciplines (e.g.: patch/configuration management, vulnerability assessment, monitoring, access control, incident response, etc.)
• Experience with automation tools (Ansible, Terraform, Powershell, Bash, Python)
• Familiarity with RMF/JSIG accreditation processes
• Familiarity with TCP/IP networking model 

Bonus points if you have:

• Experience in a security engineering or system administration role
• Experience with AWS and/or Azure cloud environments (cloud security concepts, hybrid deployments, etc.) 
• Proactive and agile mindset to improving system security posture and team efficiency
• Ability to balance security requirements with operational efficiency
• AWS or Azure technical certifications
• Bachelor’s or Master’s degree in Computer Science, Software Engineering, Information Assurance, Cybersecurity, or related field
• Experience with security incident response teams (NOC/SOC)
• Familiarity with container security (Docker/Kubernetes/ECS/EKS/AKS)
• Strong ability to develop security assessment methodologies to improve detection, efficiency, and accuracy

Clearance: 

Must have an active Secret level clearance; TS/SCI preferred