Sr. Security Engineer - Federal Customer

Sr. Security Engineer
- Federal Customer

(on-site 5 days per week/Chantilly, VA - TS/SCI Required

If you enjoy working with new technologies, enterprise-leading equipment, and seek to secure and maintain compliance, we would like to speak to you. This position will play a key role in meeting critical compliance and security baselines of next-generation infrastructure to support Information Technology (IT) workloads.

You will join a diverse team of Dev Ops Engineers to design, deploy, maintain, and secure platform infrastructure. You will collaborate with people inside and outside the organization to deliver the highest standards for building, deploying, and securing infrastructure.

The Security Engineer is focused on automating security practices to ensure compliance with critical infrastructure. This includes traditional compliance and vulnerability scanning of switches, routers, firewalls, operating systems, applications, and platform components associated with Kubernetes. As a Security Engineer, you are responsible for the detection and mitigation of security risks to meet security requirements and maintain compliance.

Security Engineers perform high-quality security assessments of network and platform components, mitigate risks, develop security automation that meets industry best practices, assist with internal/external customer interactions, and produce appropriate security and compliance documentation.

• Maintain high security and compliance standards through security automation
• Deliver simple, sustainable, and repeatable solutions and processes
• Operate and troubleshoot network routing, interconnectivity, platforms, performance, and configuration issues; including low level application interaction, Linux systems, and next-gen networking software tools
• Maintain security best practices across the infrastructure to ensure systems are fully compliant with government/industry standards and policies
• Think Big, and innovate new security solutions that enable us to move faster and meet key security and compliance milestones
• Ensure the roll-out of new designs and products meet compliance and security requirements, as well as assist with deployment and sustaining platform infrastructure and tooling

• Experience with the Authority to Operate (ATO) process, NIST SP 800-53, Cyber Security and Risk Management Frameworks, Security Center, Nessus, and log/event aggregation tools (Splunk/Wazuh/Sys Log)
• Knowledge in network topologies and architectures (VLAN, LAN, WAN)
• Ability to effectively communicate with team members, vendors, and customers to understand requirements and implement solutions
• Proficient time management to prioritize tasks and meet deadlines in a fast-paced networking environment
• Ability to operate and troubleshoot operating systems to include networking devices (Linux, Windows, Cisco IOS, Palo Alto)
• Experience managing firewall rule sets to secure infrastructure
• Knowledge with protocol analysis tools such as Wireshark and tcpdump
• 15+ years of relevant experience with a bachelor's degree
• Active TS/SCI and the ability to maintain access as required by the program

• Problem-Solving:
  Excellent analytical and problem-solving skills to diagnose and resolve complex technical issues in distributed systems.
• Communication:
  Strong verbal and written communication skills to collaborate effectively with development teams, operations, security, and other stakeholders.
• Collaboration:
  
  Ability to work effectively in a team environment and lead technical initiatives.
• Mentorship:
  As a Senior role, the ability to guide and mentor junior engineers, share knowledge, and foster best practices.
• Proactive & Ownership:
  Proactive approach to identifying and addressing potential issues, with a strong sense of ownership over the platform.
• Adaptability & Continuous Learning:
  Eagerness to learn new technologies and adapt to a rapidly evolving cloud-native landscape.

• Proficient in either Python or Go programming language
• Experience working with RESTful APIs to automate security assessments and mitigation processes