Senior Information Security Engineer

Alto firewalls, intrusion prevention systems (IPS), SIEM platforms such as QRadar, endpoint protection, and Data Loss Prevention (DLP) solutions.

• Lead the development and implementation of security controls, standard operating procedures (SOPs), and security policies designed to strengthen the organization’s security posture and support regulatory and contractual compliance.

• Perform incident response, malware analysis, threat investigations, vulnerability assessments, and other security operations activities.

• Administer and optimize security platforms such as Trellix ePO to maintain effective protection, visibility, and operational readiness.

• Manage DLP solutions, including platform administration, configuration, policy development, tuning, monitoring, and incident support.

• Conduct penetration testing and security assessment activities, document findings, and develop actionable remediation recommendations for leadership and key stakeholders.

• Serve as a subject matter expert for cybersecurity technologies, processes, and infrastructure, providing technical guidance, mentoring, and training across the organization.

• Lead security modernization initiatives, including migrations from Trellix to CrowdStrike and QRadar to Elastic.

• Work closely with engineering, IT, security, and business teams to identify security risks and develop practical solutions that support both mission and operational, * Strengthen the resilience of critical systems, networks, and data against evolving cyber threats.

• Advance organizational compliance with CMMC Level 2 and applicable Department of Defense security requirements in support of customer, contractual, and business objectives.

• Improve incident detection, investigation, and response capabilities, reducing operational risk and minimizing the potential impact of cybersecurity events.

• Drive continuous improvement across security operations through technical expertise, security engineering, process optimization, and modernization initiatives.

• Provide teams and leadership with actionable security guidance, technical expertise, training, and informed recommendations.

• Support the secure adoption of new technologies and cybersecurity capabilities while balancing mission requirements, operational needs, and risk.

• Help establish a mature, sustainable security program capable of supporting current and future government and commercial requirements.

• Ability to obtain and maintain a Top Secret/SCI security clearance.

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline, or equivalent practical experience.

• 5+ years of experience in IT, Cybersecurity Operations, Security Engineering, or a related field, including experience working in or supporting a Security Operations Center (SOC) environment.

• Proficiency in at least two scripting languages, such as Python, PowerShell, or Bash.

• Working knowledge of Linux environments; experience with SELinux is preferred.

• Hands-on experience with cybersecurity technologies such as QRadar, Palo Alto firewalls, Trellix ePO, CrowdStrike, Elastic, IPS, endpoint security, and DLP solutions.

• Current DoD IAT Level II certification or the ability to obtain an appropriate certification within the required timeframe.

• Familiarity with CMMC Level 2 requirements, the Risk Management Framework (RMF), DISA STIGs, and applicable DoD cybersecurity requirements.

• Strong understanding of threat intelligence, vulnerability management, incident response, security monitoring, and cybersecurity operations.

• Experience developing, reviewing, and maintaining technical documentation, security procedures, SOPs, and related operational documentation.

• Strong written and verbal communication skills, with the ability to communicate complex security issues clearly to both technical and non-technical audiences.

Who You Are

• Analytical and detail-oriented, with the ability to exercise sound judgment and think critically in high-pressure situations.

• An effective communicator who works well across technical, operational, and leadership teams.

• A proactive problem solver who takes ownership of issues and follows them through resolution.

• Comfortable working in an environment where cybersecurity, engineering, compliance, and mission requirements intersect.

• Customer- and mission-focused, with the ability to translate technical security risks into practical recommendations.

• A collaborative technical leader who can influence stakeholders, build consensus, and drive security initiatives across the organization.

• Committed to continuous learning and staying current with evolving cybersecurity threats, technologies, and defensive practices.