Security Engineer
Role details
Job location
Tech stack
Job description
Plan, implement, and monitor on-premises and virtual network services and systems
Configure and maintain systems in compliance with organizational security policies and procedures including:
User account management
System configuration
Backup and recovery
Develop and harden secure solutions across cloud and hybrid infrastructures in support of mission essential systems.
Review and enforce NIST 800-53 controls and System Security Plans (SSPs) in support of the ATO process.
Perform vulnerability identification and remediation processes to reduce exposure to system threats.
Collaborate with development, infrastructure, and compliance teams to enforce secure design principles.
Contribute to the creation of security documentation, policies, and control evidence.
Participate in security audits, penetration testing, and incident response events.
Implement and enforce data protection, encryption, and identity/access controls.
Employees in this role are responsible for safeguarding sensitive information and must adhere to all organizational security and privacy policies, ensuring the protection, proper handling, and confidentiality of data at all times.
Requirements
SteerBridge is seeking experienced Security Engineers to ensure the security of infrastructure and systems being leveraged to help customers achieve their mission. The ideal Security Engineer will have well rounded experience in network operations, systems administration, log analysis, blue team defense & incident response, and threat & vulnerability analysis. The Security Engineer will support multiple projects with diverse technology stacks and will have the opportunity to be the frontline defense for missions that make a difference.
Bachelor's or Master's degree in Cybersecurity, Information Systems, or a related field.
An active Secret security clearance or the ability to obtain one is required.
PROFESSIONAL EXPERIENCE / QUALIFICATIONS
5+ years of cybersecurity engineering experience in federal, military, or large enterprise environments.
Familiarity with one or more of the following frameworks: NIST SP 800, CNSSI, SOC
Experience with system hardening network security, encryption protocols, vulnerability scanning, and incident response
Experience working with cloud platforms (AWS, Azure, Google Cloud Platform) in secure environments.
Experience with the following methodologies and tools: SIEM, XDR, SAST/DAST, STIG, SCAP
Experience implementing and managing identity and access management controls, including role-based, attribute-based, and federated access models, ensuring least-privilege enforcement and secure authorization across architectures and access governance practices.
Experience with log aggregation and correlation
Preferred:
CCNA-Security, Security+ CE, or CISSP
Familiarity with Federal Executive and Military security requirements and IT systems.
Strong written and verbal communication skills with the ability to produce audit-ready documentation (such as Incident Reports and Test Reports).
Proficiency with Microsoft Sentinel, Splunk, Tenable/Nessus, CrowdStrike, Microsoft Defender Endpoint
Proficiency with securing AI-based tools
Experience coordinating with ISSOs, ISSEs, and federal security teams.
Benefits & conditions
$142,000 - $179,000 a year
Salary is commensurate with experience.