Principal Security Engineer

Overview

To secure technical infrastructure and workloads by designing, and operationalizing capabilities; support the implementation of continuous security monitoring practices along with threat and vulnerability prevention, detection, and response capabilities. Collaborate with engineers, internal teams, and vendors to support all phases of product integration, operations, and maintenance to ensure a secure Navy Federal environment. Work independently to interpret and develop solutions to complex business challenges that have a significant impact on the function or branch.

Specialized skill set and proficiency with procedures and techniques. Recognized as an expert in own area within the company.

• Strategize and develop advanced security standards and verify controls for hardening infrastructure and development pipelines
• Implement sophisticated monitoring and incident response patterns for the security operations center, integrating with SEIM/SOAR technologies
• Partner with senior threat vulnerability management and risk management teams to secure the network environment
• Design and implement advanced monitoring and performance metrics to ensure service efficiency and effectiveness
• Lead high‑level collaboration with internal security teams and vendors to implement robust security controls
• Direct the management of reported system application vulnerabilities through comprehensive remediation and maintenance
• Provide strategic direction and expertise in the systems engineering lifecycle for security initiatives
• Assist with the development and enhancement of practices, procedures, and instructions
• Develop and maintain strong working relationships with team members, subject matter experts, and leaders; work with senior management on complex issues
• Lead medium to large projects and initiatives
• Mentor lower level staff

• Bachelor’s Degree in Information Technology or the equivalent combination of education, training or experience
• 7-10 years of experience in cyber security
• Subject matter expert within business area/specialization with understanding of interrelationships of different disciplines
• Significant experience in system administration, database administration, network engineering, software engineering, or software development, with a concentration in Cyber Security
• Advanced knowledge of SEIM/SOAR technologies
• Advanced knowledge of security operations and cyber‑attack methods
• Advanced skill in security engineering with the ability to design and implement secure systems and network
• Advanced skill with multiple cyber security detection/technologies/tools
• Significant experience working with a variety of cyber architectures

• 5+ years managing Checkpoint firewalls in a cloud environment
• 3+ years managing firewalls in an Azure IaaS environment
• Extensive experience managing Checkpoint infrastructure in an IaaS environment
• Experience in managing security policies and NAT policies within Checkpoint
• Advanced knowledge in troubleshooting Checkpoint firewalls

• Managed migrations from Checkpoint clusters to VMSS
• Developed auto‑scaling requirements for scale sets
• Experience with Palo Alto Firewalls
• Served as lead engineer for a large organization

Monday - Friday, 8:00AM - 4:30PM

• 820 Follin Lane, Vienna, VA 22180
• 5510 Heritage Oaks Drive, Pensacola, FL 32526

All qualified applicants will receive consideration for employment without regard to age, race, sex, color, religion, national origin, disability, veteran status, pregnancy, sexual orientation, genetic information, gender identity or any other basis protected by applicable law.

If you need accommodation or assistance for a qualifying condition to complete the online application (or during any stage of the hiring process), you can contact Navy Federal's Medical Accommodations team at medical accommodations or by calling  This team cannot provide any information on job postings or application status.