Security Engineer

Overview

Looking to make a difference and help protect critical government missions? Join Acuity's team of cybersecurity professionals supporting the U.S. Department of State. As a Security Engineer you will help secure enterprise infrastructure and cloud environments through continuous monitoring, vulnerability management, secure configuration and STIG enforcement, ATO sustainment, cloud security posture management, Zero Trust implementation, incident response, and compliance with federal cybersecurity standards.

This role partners closely with system administrators, cloud and infrastructure engineers, security analysts, and government stakeholders to strengthen the organization's security posture while supporting modernization initiatives. The position is centered on infrastructure and cloud security rather than application-development security, while maintaining enough application security awareness to collaborate effectively across the broader Department of State security ecosystem.

Are you ready to use your expertise in the areas of IT Modernization, Data Enablement, and Hyperautomation to make a real difference? Join Acuity, Inc., a technology consulting firm that supports federal agencies. We combine industry partnerships and long-term federal experience with innovative technical leadership to support our customers’ critical missions.

• Administer and support infrastructure and cloud security technologies, including Microsoft Defender for Cloud, Microsoft Purview, SCUBA, Rapid7, Tenable, Science Logic, and comparable enterprise security platforms.
• Support continuous monitoring and infrastructure security operations across servers, virtual machines, cloud platforms, networked systems, and enterprise services; identify security findings and coordinate remediation with infrastructure and operations teams.
• Perform security assessments, vulnerability analysis, risk assessments, and security control validation in accordance with NIST RMF and Department of State security requirements.
• Support continuous monitoring, iPost activities, security compliance, documentation, audit readiness, and ATO sustainment for enterprise systems.
• Administer and support security technologies for vulnerability management, cloud security posture management, identity and access management (IAM), configuration management, system hardening, and security monitoring.
• Conduct and support enterprise vulnerability management using tools such as Tenable, Rapid7, Microsoft Defender for Cloud, and comparable platforms; track findings through remediation and validation.
• Support security incident response and remediation activities in accordance with NIST SP 800-61 and applicable Department of State guidance, coordinating with Security Operations Center (SOC) personnel as needed.
• Review system configurations, STIGs, security baselines, and access controls to ensure compliance with least-privilege principles, Department of State requirements, and federal cybersecurity standards.
• Support security monitoring of enterprise environments including Windows Server, VMware ESXi, VMware vCenter, Active Directory, cloud platforms, virtualized infrastructure, and associated enterprise services using tools such as Science Logic and other monitoring platforms.
• Maintain working familiarity with Department of State application security and code‑scanning capabilities, including Fortify and comparable SAST/DAST/SCA tools, to understand application‑related findings, dependencies, and interfaces with infrastructure security; hands‑on administration of these tools is not the primary focus of this role.
• Assist with implementation and monitoring of security controls across cloud, network, and infrastructure environments, including cloud security posture management and Zero Trust initiatives.
• Collaborate with system administrators, cloud and infrastructure engineers, security analysts, project teams, and business stakeholders to identify risks, recommend security improvements, and resolve technical issues.
• Prepare and maintain technical documentation, security procedures, risk assessments, remediation plans, Plan of Action and…