Security Engineer

• Research security issues and help create new security technology solutions
• Design and develop scripts to automate the security control workflow lifecycle
• Evaluate overall risk by using and enhancing monitoring systems and tools (custom, Splunk, New Relic, firewall, system, application, native CSP, SIEM and vulnerability scans)
• Help develop and implement information security operational and strategic procedures, following industry best practices and compliance requirements
• Execute large-scale data classification and security assessments
• Develop and enforce policies for secure API key generation, storage and rotation
• Manage remediation plans in support of risk assessment goals
• Conduct threat modeling exercises to identify potential security risks and vulnerabilities
• Follow the agency’s security, accessibility, documentation, configuration management and software development lifecycle requirements
• Provide technical guidance and share security knowledge with other team members

• Bachelor’s degree
• At least four years of relevant experience across compliance, identity, networking, system data and cloud security
• Experience researching security issues and helping create new security technology solutions
• Experience evaluating overall risk using monitoring systems and tools (custom, Splunk, New Relic, firewall, system, application, native CSP, SIEM and vulnerability scans)
• US citizenship

Preferred: Monitoring solutions (Splunk, New Relic and similar); scripting; Zero Trust Architecture; AWS or Azure security; remediation; PKI and API key management; threat modeling; certificate management; Okta; Kali Linux; red teaming, Hack The Box, capture-the-flag and penetration testing; the MITRE ATT&CK framework; a strong understanding of cloud security principles and best practices. Certifications such as CISSP, CCSP, CompTIA Security+, a cloud security certificate (any CSP), CISA or CCNA are a plus.