> Markdown version of [/jobs/ext/3941060-security-engineer](https://www.wearedevelopers.com/jobs/ext/3941060-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer

- **Company:** System One
- **Location:** Laurel, MD, United States (Remote available)
- **Experience:** Expert
- **Contract:** Temporary contract
- **Skills:** Amazon Web Services, Audit Trail, Configuration Management, Code Review, Intrusion Detection and Prevention, Role-Based Access Control, Security Information and Event Management, Control Language, Uipath, Information Technology, Patch Management, Vulnerability Analysis
- **Published:** October 26, 2026
- **Apply:** https://www.techcareers.com/job.asp?id=3466768902&tx=DT10596UYT&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* 5+ years of security engineering experience working for a FedRAMP or FISMA Moderate system in an AWS GovCloud environment.
 * Hands-on experience with UiPath architecture: Orchestrator, attended/unattended robots, assets and credential stores, queues, and robot host builds.
 * Design and implementation experience with service account models, credential vaulting, RBAC, separation of duties, and session/audit logging.
 * Knowledge of NIST SP 800-53 Rev 5 Moderate controls applied in build decisions across AC, AU, CM, IA, and SC families.
 * Experience with STIG/CIS hardening, vulnerability scanning, patch management, and configuration management.
 * Understanding of secure SDLC processes and code review skills for automation workflows and scripts.
 * Ability to translate engineering decisions into control language for the A&A team.

## Description

Monitor systems for abnormal activity. Analyze alerts, distinguish threats from false positives, categorize incidents by risk. - Lead incident response: containment, eradication, recovery, post-incident analysis, documenting steps. Optimize detection capabilities: refine alert thresholds, tune SIEM rules, integrate new data sources, reduce false positives. Compile weekly/monthly reports on incident trends, threat activity, and security posture for internal stakeholders. Actively participate in team meetings, threat intel reviews, and cross-departmental syncs., * Monitor systems for abnormal activity and analyze security alerts to identify potential threats.

 * Lead incident response efforts, including containment, eradication, recovery, and post-incident analysis.
 * Optimize detection capabilities by refining alert thresholds, tuning SIEM rules, and integrating new data sources to reduce false positives.
 * Compile and present weekly/monthly reports on incident trends, threat activity, and overall security posture to internal stakeholders.
 * Participate in team meetings, threat intelligence reviews, and cross-departmental synchronization efforts., System One, and its subsidiaries including Joulé, ALTA IT Services, CM Access, TPGS, and MOUNTAIN, LTD., are leaders in delivering workforce solutions and integrated services across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible full-time employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.