Security Engineer; Cross-Functional SME

Location: Chantilly, VA

Security Clearance: Active TS or higher [Required]

Job Type: Full-Time

Target Salary Range*: $115,000 - $195,000

• This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary

The Security Engineer (Cross-Functional) is responsible for security across multiple applications, platforms, and cloud environments. This role develops incident response and recovery plans, supports cyber resiliency, and designs monitoring and alerting capabilities to detect anomalous activity. The engineer maintains secure cloud infrastructure, manages communication security resources or cryptographic keys, and coordinates with industry partners to advise the government on vulnerabilities and security recommendations.

• Secure multiple applications and platforms, including critical data and vulnerability points.
• Perform web application and platform security testing.
• Protect organizational websites, Internet transactions, confidential order information, and external business-to-business connections.
• Apply Internet firewall and encryption technologies to maintain organizational and customer security.

• Develop incident response and recovery plans.
• Design monitoring and alerting capabilities to identify anomalous activity across multiple systems.
• Monitor applications and platforms for anomalous activity.
• Correlate data to support detection, remediation, monitoring, and recommendations for changes.
• Support cyber resiliency and security planning.

• Operate secure cloud infrastructure, platforms, and software.
• Install, maintain, and upgrade cloud computing environments and core infrastructure.
• Develop, build, maintain, upgrade, and continuously improve cloud networks and cloud-based systems.
• Apply defense-in-depth security governance policies and guidelines to cloud environments.

• Manage organizational communication security (COMSEC) resources in accordance with CNSSI 4009, or serve as a key custodian for a cryptographic key management system (CKMS).

• Coordinate with industry partners to advise the government on security vulnerabilities and recommendations.
• Update and delete user accounts.
• Monitor compliance violations and perform follow-up activities.
• Develop security policies, practices, and guidelines.

• Bachelor’s degree required.

• Minimum of 10 years of experience.
• Experience with cloud technology.

• Ability to develop incident response and recovery plans.
• Knowledge of cyber resiliency, security planning, and web application and platform security testing.
• Ability to design monitoring and alerting capabilities and correlate security data across systems.
• Understanding of application-critical data and vulnerability points.
• Technical capabilities supporting secure cloud infrastructure, platforms, software, and networks.
• Knowledge of defense-in-depth security governance policies and guidelines.
• Ability to manage COMSEC resources or perform CKMS key custodian duties.
• Knowledge of Internet firewalls, encryption technologies, website security, and transaction protection.
• Ability to develop security policies and coordinate vulnerability recommendations with industry and government stakeholders.