Security Engineer IV – Security Tools and Analytics

Job Overview

Responsibilities

• Deploy, configure, and maintain enterprise security tools such as SIEM, vulnerability management, and IDS/IPS platforms.
• Perform advanced security analytics and monitoring for threat detection, correlation, and incident response.
• Integrate security tools into SOC workflows and federal reporting requirements.
• Support vulnerability scanning, remediation planning, and compliance dashboards.
• Develop and manage automation/orchestration workflows across security platforms.
• Provide guidance and mentorship to junior security engineers and analysts.
• Collaborate with stakeholders to design and implement enterprise security solutions.
• Ensure compliance with NIST SP 800-53 Rev. 5, CIS Controls, FISMA, and FedRAMP standards.
• Document technical specifications, SOPs, and security engineering processes.
• Participate in 24/7/365 operations and on-call rotations as required.

Required Experience

• 10+ years of cybersecurity engineering and operations experience.
• Extensive expertise with enterprise security tools including SIEM, endpoint protection, and vulnerability management platforms.
• Proven ability to support incident response and forensic investigations using security analytics.
• Experience leading enterprise security engineering initiatives in federal environments.
• Strong communication and documentation skills for reporting and compliance activities,
• Lead and coordinate initiatives, managing requirements, schedules, and actions to ensure timely and successful project delivery in alignment with organizational objectives.
• Collaborate with Security, Infrastructure, and Operations teams to develop,
  implement, and manage automation scripts, enhancing the efficiency and
  effectiveness of security operations.
• Candidate will possess knowledge &/or familiarity with Armis &/or Axonius
  solutions relating to Cyber Asset Attack Surface Management (CAASM) and the
  Elastic Stack solution for searching, analyzing, and visualizing SIEM data with
  regard to search, observability, and security.
• Maintain and troubleshoot existing security infrastructure, working closely with
  server and networking teams to resolve issues and optimize performance.
• Implement and manage advanced solutions to support and enhance infrastructure
  management, security operations, and threat intelligence activities, ensuring
  seamless integration with existing security tools and processes.
• Provide knowledgeable troubleshooting for Information Security Systems,
  offering strategic guidance on optimizing and extending functional capabilities to
  meet evolving operational challenges.
• Continuously assess and improve existing or future frameworks, staying up to
  date with the latest security and automation technologies to ensure best practices
  are applied across all projects.
• Create, implement, maintain, troubleshoot, &/or utilize advanced scripting (in
  BASH, Perl, JavaScript, or Python for example) to automate or simply tasks,
  enhance system functionalities, and troubleshoot issues. Must also be comfortable
  performing Administration and O&M tasks from the command line.
• Maintain detailed documentation for system designs, configurations, processes,
  and service records.
• Lead and mentor junior team members in best practices and technical challenges.
• Ability to participate in a 24/7/365 on call rotation.
• Organized, detail-oriented, and excellent problem-solving skills with the ability to
  work independently or as part of a team.
• Capability to troubleshoot and resolve LAN/WAN connections,
  performance/throughput issues, and other related network problems.
• Strong communication and documentation skills, with the ability to explain
  complex technical concepts to non-technical stakeholders.
• Analyzes development and implementation requirements and makes appropriate
  modifications to existing systems and prepares specifications based on customer
  requests.
• Possess knowledge &/or familiarity with security hardening framework standards
  and regulations from Center for Internet Security (CIS) Control 4, National
  Institute of Standards and Technology (NIST) Special Publication 800-53
  Revision 5, and Defense Information Systems Agency’s (DISA) Security
  Technical Implementation Guides (STIGs).

Education & Certifications

• Candidate will hold a ComSci/CIS/InfoSec/IT related bachelor’s degree (or
  higher) with ~8+ years of Information Security work experience or an equivalent
  combination of education, certifications, & IT experience.
• Candidate will hold and maintain a current Information Security certification such as "Certified Information Systems Security Professional (CISSP)", "Certified Information Security Manager (CISM)", or higher InfoSec related certification. (E.G.: ISC2 Information Systems Security Engineering Professional (ISSEP))

Clearance Requirement

• Must be eligible to obtain and maintain a Public Trust (High-Risk, Level 5) clearance.