Security Operations Engineer

540
Arlington, VA, United States
about 1 month ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
5 years minimum
Working hours
Regular working hours
Job source

Tech stack

Amazon Web Services Microsoft Azure Cloud Computing Cloud Computing Security CompTIA Security+ Cyber Security Continuous Integration Linux System Administration Fortify (Software) Software Vulnerability Management Policy as Code Google Cloud
+7 more
Cloud Platform System Spring Cloud Containerization Information Technology Machine Learning Operations Devsecops Static Application Security Testing

Job description

In this role, you will support the implementation and maintenance of cybersecurity controls across a complex cloud and platform environment. You will work closely with engineers, architects, and security stakeholders to ensure systems are secure, compliant, and resilient within highly regulated, high-impact environments., * Support implementation of security controls across cloud infrastructure, platforms, and applications

  • Assist in maintaining compliance with DoD security requirements and frameworks (RMF, NIST 800-53)
  • Collaborate with engineers and architects to integrate security into system design and development
  • Support vulnerability management, scanning, and remediation efforts
  • Assist in monitoring system security posture and responding to security findings
  • Support development and maintenance of security documentation, including SSPs and POA&Ms
  • Participate in security assessments, audits, and authorization activities
  • Support incident response activities and root cause analysis
  • Collaborate with cross-functional teams to promote secure development and operational practices

Requirements

Do you have experience in Vuls?, Do you have a Bachelor’s degree?, Citizenship & Clearance Requirement: Per client requirements, candidates must be U.S. Citizens with an active DoW clearance with TS/SCI eligibility Education Requirement: Bachelor’s Degree in Computer Science, Cybersecurity, or related field (preferred) 540 Internal Thrive Level: Security Specialist III, * 5+ years of experience in cybersecurity, information assurance, or related roles

  • Experience working with cloud environments (AWS, Azure, or Google Cloud)
  • Experience completing the RMF process from start to finish, including required documentation
  • Experience creating and managing ATO packages in eMASS
  • Familiarity with DoD security frameworks and NIST 800-53 Rev. 5
  • Familiarity with STIGs and cybersecurity scanning (SAST, Fortify)
  • Familiarity with securing containerized environments and cloud-native applications
  • Experience with DevSecOps practices and CI/CD security integration
  • Experience in Cybersecurity automation (policy as code)
  • CompTIA Security+ certification required (or ability to obtain within 30 days of hire)

NICE TO HAVE

  • Experience supporting Google Cloud environments (GCP)
  • Experience securing machine learning operations (MLOps)
  • Familiarity with cloud security concepts
  • Experience working with Linux-based systems
  • Experience supporting cybersecurity efforts within high-security or highly-regulated environments

Benefits & conditions

Pulled from the full job description

  • Referral program
  • Health insurance
  • 401(k) matching
  • Paid time off
  • Vision insurance
  • Dental insurance
  • Flexible spending account, * Flexible PTO + all Federal holidays off
  • Health, dental and vision insurance plans
  • Flexible Spending Account (FSA)
  • 401k with employer match
  • Company-sponsored life insurance, short- and long-term disability
  • Professional development (training, certifications, conferences)
  • Paid cloud developer accounts
  • Referral bonuses
  • HQ office perks (parking / metro reimbursement, nitro coffee & lunches)
  • Annual social events (540 Week, hackathon, charity golf tournament, etc.)
  • Access to 540’s Washington Capitals & Nationals tickets

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

6:10 min

Unlocking free learning credits via Google Cloud Innovators

Asrar Asrar · WWC 2024

1:15 min

Key lessons learned from implementing automated mobile DevSecOps

Moataz Nabil Moataz Nabil · LIVE

2:07 min

Implementing business logic leveraging the Spring Cloud framework

Ingo Weichsel · WWC 2023

1:26 min

Selecting open source technologies for multi-cloud capability

Ingo Weichsel · WWC 2023

2:07 min

Integrating security practices for devsecops adoption

Nevelina Aleksandrova · LIVE

Videos

See all

Related articles

See all