it specialist

staff engineer - regulatory technology Jobs in Washington

staff engineer - regulatory technology

chief information security officer Jobs in Washington

chief information security officer

comsec information security specialist Jobs in Washington

comsec information security specialist

cybersecurity engineer Jobs in Washington

cybersecurity engineer

information security engineer

Client Server Software Solutions

<div><div><div><div><p><b>Job Description and Tasks</b>:</p><p>
The contractor shall assist, advise, and guide the MARS developers through the Risk Management Framework (RMF). The contractor will apply knowledge and understanding of information assurance (IA) concepts, practices. and procedures using established JC, DoD, and DIA policies and standards to minimize and/or mitigate RMF security risks.</p><p>
The contractor will review and comment on technical documentation to ensure compliance with security standards and regulations. The contractor will recommend security monitoring solutions as required to meet IA requirements for RMF. The contractor will guide the MARS PMO developers through successful assessment and authorization of system components to obtain required authorization to operate.</p><p>
The contractor will coordinate closely with MARS PMO developers and DIA/CIO cybersecurity team to support, monitor, test, and troubleshoot software and hardware IA problems related to RMF.</p><p>
The contractor will identify, design, develop, and implement security procedures and security-embedded solutions appropriate to the environment with the help of vendor resources in an agile cadence.</p><p><b>
Qualifications</b></p><p><b>
Education:</b></p><p>
Bachelor's degree in a relevant discipline (e.g., Information Assurance, Information Security System Engineering)</p><p><b>
Minimum Experience Required:</b></p><p>
8-12 years&rsquo; work experience with the Department of Defense. (DoD) or Intelligence Community (IC).</p><p><b>
Preferred Experience Required:</b> None specified.</p><p><b>
Certifications:</b> Mandatory Certification: Security+ CE.</p><p>
Professional certifications such as CTSM, CISSP, CCNA are desired but not required.</p><p><b>
Security Clearance</b>:</p><p>
This position requires TOP SECRET clearance/Sensitive Compartmentalized Information (SCI) eligibility with a Counterintelligence (CI) Polygraph.</p><p><b>
About The Organization</b></p><p>
Constellation West is an award winning company that delivers Information Technology (IT) engineering services and solutions and non-IT subject matter expertise worldwide. Established in 1997, Constellation West is an industry leader, partnering with key organizations. As a prime contractor or preferred subcontractor, we have a continual list of opportunities to fill nationwide with multiple agencies such as the Department of Veteran Affairs, the Department of Defense, civilian agencies, and the national intelligence community. Many positions supporting the U.S. federal government require our employees to be granted security clearances.</p><p>
Constellation West strives to provide fully integrated solutions that cover all aspects of system and network engineering, administration, and management. We believe in attracting the right people ready to take on exciting challenges and be part of a dynamic team. Are you one of them? Do you have the expertise and knowledge to solve complex problems? If yes, join us and be a part of an exhilarating work environment that rewards your hard work and dedication. Don't miss out on this amazing opportunity to make a difference!</p><p>
Benefits include but are not limited to:</p><ul><li>Tuition reimbursement</li><li>Competitive 401(k) plan</li><li>Competitive Health Benefits</li><li>11 Paid Holidays!!</li><li>15 PTO Days!</li><li>Veteran Hiring Preference</li></ul><p>
Constellation West is proud to be an EEO/AA employer M/F/D/V</p></div></div></div></div>

Information Systems Security Engineer

MTSI

<div><div>MTSI is seeking a <b>Information Systems Security Engineer (ISSE)</b> whose primary function will be to serve as the Program Office&rsquo;s information security professional responsible for managing all aspects of an organization's information security system, including researching, testing, training, and implementing programs designed to safeguard sensitive information from possible compromise.</div><div>
</div><div>
Your essential job functions will include but may not be limited to:</div><ul><li>
The ISSE works with System Engineering teams to incorporate cyber resiliency objectives, techniques, and design principles into all system engineering and development efforts throughout the systems development life cycle (SDLC).</li><li>
Develop and maintain documentation and diagrams for security tools, system environments, and cloud operations</li><li>
Perform requirements analysis, design, and integration for complex software applications and collaboration infrastructures</li><li>
Participate in the change management process, including reviewing Change Requests and assisting in the assessment of security impact of proposed changes</li><li>
Write implementation and design documents describing how security features are implemented</li><li>
Create and maintain information system security documentation, Standard Operating Procedures (SOP), and provide guidance on active Plans of Action and Milestones (POA&amp;M)</li><li>
Conduct periodic and continuous monitoring of the system, procedures, and documentation to ensure compliance with the authorization package</li></ul><div></div><div><b><br>
Required:</b></div><ul><li>
15+ years' technical experience in cybersecurity, information technology, or systems engineering</li><li>
Must have experience working with Special Access Programs (SAPs)</li><li>
Strong proficiency fault tolerance, and Reliability, Maintainability, Availability (RMA) subject matter.</li><li>
Must possess excellent analytical skills and be capable of quantifying risk to enterprise systems and level of compliance with security policy</li><li>
Excellent communication skills (verbal and written) required</li></ul><div></div><div><b><br>
Advanced knowledge in one or more of the following areas:</b></div><ul><li>
Java, Python, Ruby and/or C++</li><li>
Linux Expertise (RedHat/RHEL or CentOS preferred)</li><li>
Dynamic &amp; Static Application Security Scanning (e.g., Arachni, OWASP ZAP, BurpSuite, Fortify, Checkmarx, etc.)</li><li>
Virtualization and containers (EC2, Docker)</li><li>
Infrastructure Security Scanning, Vulnerability Scanning (Twistlock, ACAS/Nessus)</li></ul><div></div><div><b><br>
Certifications:</b></div><ul><li>
Certified Information Systems Security Professional (CISSP).</li><li>
Certified Cloud Security Professional (CCSP).</li><li>
Information Systems Security Engineering Professional (ISSEP)</li><li>
DOD Information Technology Security Certification and Accreditation Process (DITSCAP)</li><li>
DOD Information Assurance Certification and Accreditation Process (DIACAP)</li></ul><div></div><div><b><br>
Education Requirements:</b></div><ul><li>
Bachelors Degree in related discipline or an additional 4 years of experience in lieu of a Degree</li></ul><div></div><div><b><br>
Clearance Requirements:</b></div><ul><li>
Current/active Top Secret/SCI; Current or recent DoD SAP access</li></ul><div></div><div><br>
</div><div>
#LI-LS1</div><div>
#mtsi</div><div>
#lawrenciumsaskatchewantrout</div><div>
#LI-Onsite</div></div>
<br>
TS/SCI
<br>
<div><h1 class="jobSectionHeader"><b>Perks and Benefits</b></h1><ul><li><div><div><i>
Vacation:</i></div><div>
New Hires Accrue 20 days of PTO and 10 Holidays per Year</div></div></li><li><div><div><i>
Health Insurance:</i></div><div>
Zero Deductible Health Plans</div></div></li><li><div><div><i>
Flexible Schedules:</i></div><div>
Flex Schedules</div></div></li><li><div><div><i>
Professional Development:</i></div><div>
Up to $10,000 Annual Education/Training Reimbursement
</div></div></li><li><div><div><i>ESOP:</i></div><div>
Funded Stock Ownership Plan</div></div></li><li><div><div><i>
401k Match+:</i></div><div>
6% 401k Match + Immediate Vesting
</div></div></li><li><div><div><i>Bonus Program:</i></div><div>
Semi-Annual Bonus Opportunity
</div></div></li><li><div><div><i>Mentorship:</i></div><div>
Career Mentorship Programs
</div></div></li></ul><h3 class="jobSectionHeader"><b>Why is MTSI a great place to work</b></h3><ul><li><div><div><i>
Interesting Work:</i></div><div>
Our co-workers support some of the most important and critical programs to our national defense and security.</div></div></li><li><div><div><i>
Values:</i></div><div>
Our first core value is that employees come first. We challenge our co-workers to provide the highest level of support and service, and reward them with some of the best benefits in the industry.</div></div></li><li><div><div><i>
100% Employee Owned:</i></div><div>
We have a stake in each other's success, and the success of our customers. It's also nice to know what's going on across the company; we have company wide town-hall meetings three times a year.</div></div></li><li><div><div><i>
Great Benefits - Most Full-Time Staff Are Eligible for:</i></div></div></li><li><ul><li><div>
Starting PTO accrual of 20 days PTO/year + 10 holidays/year</div></li><li><div>
Flexible schedules</div></li><li><div>
6% 401k match with immediate vesting up to $9k annually</div></li><li><div>
Semi-annual bonus eligibility (July and Decemeber)</div></li><li><div>
Company funded Employee Stock Ownership Plan (ESOP) - a separate qualified retirement account</div></li><li><div>
Up to $10,000 in annual educational reimbursement</div></li><li><div>
Other company funded benefits, like life and disability insurance</div></li><li><div>
Optional zero deductible Blue Cross/Blue Shield health insurance plan</div></li></ul></li><li><div><div><i>
Track Record of Success:</i></div><div>
We have grown every year since our founding in 1993.
</div></div></li></ul><p>Modern Technology Solutions, Inc. (MTSI) is a 100% employee-owned engineering services and solutions company that provides high-demand technical expertise in Digital Transformation, Modeling and Simulation, Rapid Capability Development, Test and Evaluation, Artificial Intelligence, Autonomy, Cybersecurity and Mission Assurance</p><p>
MTSI delivers capabilities to solve problems of global importance. Founded in 1993, MTSI today has employees at over 20 offices and field sites worldwide.</p><p>
For more information about MTSI, please visitwww.mtsi-va.com</p><h4 class="jobSectionHeader"><b>
EEO Statement</b></h4><div><div><div><p>
MTSI embraces nine core values including our first core value of Employees come first. Consistent with our Core Values, we are committed to Equal Opportunity, making decisions without regard to race, color, religion, sex, national origin, age, military/veteran status, disability, or any other characteristics protected by applicable law. MTSI is committed to Equal Employment Opportunity and providing reasonable accommodations to applicants and employees with physical and/or mental disabilities.</p></div></div></div></div>
<br>
<div><h3 class="jobSectionHeader"><b>Why is MTSI a great place to work</b></h3><ul>
<li><b>Interesting Work: </b>Our co-workers support some of the most important and critical programs to our national defense and security.
</li><li><b>Values: </b>Our first core value is that employees come first. We challenge our co-workers to provide the highest level of support and service, and reward them with some of the best benefits in the industry.
</li><li><b>100% Employee Owned: </b>We have a stake in each other's success, and the success of our customers. It's also nice to know what's going on across the company; we have company wide town-hall meetings three times a year.
</li><li><b>Great Benefits - Most Full-Time Staff Are Eligible for:
</b></li><li><ul><li>Starting PTO accrual of 20 days PTO/year + 10 holidays/year
</li><li>Flexible schedules
</li><li>6% 401k match with immediate vesting up to $9k annually
</li><li>Semi-annual bonus eligibility (July and Decemeber)
</li><li>Company funded Employee Stock Ownership Plan (ESOP) - a separate qualified retirement account
</li><li>Up to $10,000 in annual educational reimbursement
</li><li>Other company funded benefits, like life and disability insurance
</li><li>Optional zero deductible Blue Cross/Blue Shield health insurance plan
</li></ul></li><li><b>Track Record of Success: </b>We have grown every year since our founding in 1993.
</li></ul><p>Modern Technology Solutions, Inc. (MTSI) is a 100% employee-owned engineering services and solutions company that provides high-demand technical expertise in Digital Transformation, Modeling and Simulation, Rapid Capability Development, Test and Evaluation, Artificial Intelligence, Autonomy, Cybersecurity and Mission Assurance</p>
<p>
MTSI delivers capabilities to solve problems of global importance. Founded in 1993, MTSI today has employees at over 20 offices and field sites worldwide.</p>
<p>
For more information about MTSI, please visit www.mtsi-va.com</p></div>

Information Systems Security Engineer (ISSE)

Koniag Government Services

Koniag Data Solutions, a Koniag Government Services company, is seeking a Privacy Engineer/ Specialist to support KDS and our government customer in Washington, DC. Currently one day a week required onsite.
<br><br>
We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.
<br><br>
The ideal candidate will possess deep expertise in federal privacy regulations and frameworks, combined with strong technical skills in privacy, automation and engineering. This role requires a professional who can bridge the gap between privacy policy requirements and technical implementation, while developing innovative solutions to streamline privacy operations. Ability to obtain and maintain required federal security clearance. This position may be Remote or on-site depending on contract requirements.
<br><br>
The Privacy Engineer/Specialist will serve as a technical privacy expert, responsible for implementing, automating, and maintaining privacy compliance programs within federal government environments. This role combines privacy expertise with engineering skills to develop scalable, automated solutions for privacy operations.
<br><br>
Principal responsibilities will include but are not limited to:
<br><ul>
<li>Design, develop, and implement automated privacy compliance workflows and tools to support federal privacy requirements</li>
<li>Engineer technical solutions for privacy impact assessments (PIAs), system of records notices (SORNs), and privacy threshold analyses (PTAs)</li>
<li>Develop and maintain privacy automation scripts, tools, and platforms to streamline privacy documentation and compliance processes</li>
<li>Conduct privacy risk assessments and provide technical recommendations for privacy-enhancing technologies</li>
<li>Build and maintain privacy dashboards, reporting tools, and metrics tracking systems</li>
<li>Integrate privacy controls into system development lifecycle (SDLC) processes and DevSecOps pipelines</li>
<li>Automate privacy compliance monitoring, including data mapping, inventory management, and control validation</li>
<li>Collaborate with IT security, development, and operations teams to embed privacy-by-design principles</li>
<li>Develop technical documentation, including privacy architectures, data flow diagrams, and privacy control mappings</li>
<li>Implement and configure privacy management platforms and tools</li>
<li>Create automated solutions for breach notification, incident response, and privacy event management</li>
<li>Support privacy audits and assessments through automated evidence collection and reporting</li>
<li>Provide technical expertise on emerging privacy technologies, including AI/ML privacy considerations</li>
<li>Train technical and non-technical staff on privacy automation tools and processes</li>
<li>Stay current with federal privacy regulations, guidance, and best practices including OMB memoranda, NIST guidelines, and agency-specific requirements</li>
</ul>
<b>Education and Experience:</b><b>Required:</b><br>
<ul>
<li>Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or related field from an accredited college or university</li>
<li>3+ years of experience in privacy engineering, privacy compliance, or related roles within federal government environments</li>
<li>3+ years of experience with automation, scripting, or software development</li>
<li>Professional privacy certification (IAPP CIPM, CIPP/US, or CIPP/G)</li>
<li>Demonstrated experience implementing privacy automation solutions</li>
</ul>
<b>Security Requirement:</b><br>
<ul>
<li>Ability to obtain a Public Trust</li>
</ul>
<b>Required Skills and Competencies:</b><br>
<ul>
<li>Expert knowledge of federal privacy laws, regulations, and frameworks including:</li>
<li>Privacy Act of 1974</li>
<li>E-Government Act Section 208</li>
<li>Federal Information Security Modernization Act (FISMA)</li>
<li>OMB Circular A-130</li>
<li>NIST Privacy Framework</li>
<li>NIST Special Publications (800-53, 800-37, 800-122)</li>
<li>FedRAMP privacy requirements</li>
<li>Strong programming and scripting skills (Python, PowerShell, JavaScript, or similar)</li>
<li>Experience with API development and integration</li>
<li>Proficiency in database management and SQL</li>
<li>Experience with privacy management platforms (OneTrust, TrustArc, BigID, or similar)</li>
<li>Knowledge of data classification, data loss prevention (DLP), and data governance tools</li>
<li>Experience with workflow automation tools (Power Automate, Zapier, or similar)</li>
<li>Familiarity with cloud platforms (AWS, Azure, GCP) and their privacy features</li>
<li>Understanding of data architecture and data modeling</li>
<li>Experience with version control systems (Git, GitHub, GitLab)</li>
<li>Strong analytical and problem-solving skills</li>
<li>Excellent written and verbal communication skills for both technical and non-technical audiences</li>
<li>Ability to translate privacy requirements into technical specifications</li>
<li>Experience working in Agile/Scrum development environments</li>
<li>Proven ability to work independently and as part of cross-functional teams</li>
<li>Strong attention to detail and commitment to accuracy</li>
</ul>
<b>Desired Skills and Competencies:</b><br>
<ul>
<li>Master's degree in related field</li>
<li>Additional privacy certifications (CIPT, FIP, CDPSE, or similar)</li>
<li>Security certifications (CISSP, CISM, Security+)</li>
<li>Experience with Robotic Process Automation (RPA) tools</li>
<li>Knowledge of artificial intelligence and machine learning privacy considerations</li>
<li>Experience with data visualization tools (Tableau, Power BI)</li>
<li>Familiarity with identity and access management (IAM) systems</li>
<li>Experience with privacy-enhancing technologies (PETs) such as differential privacy, homomorphic encryption</li>
<li>Knowledge of records management and NARA requirements</li>
<li>Experience with ServiceNow or similar ITSM platforms</li>
<li>Background in system architecture or enterprise architecture</li>
<li>Experience supporting Privacy Impact Assessments (PIAs) in FedRAMP environments</li>
<li>Knowledge of Section 508 compliance and accessibility requirements</li>
<li>Experience with continuous monitoring and continuous authorization (ConMon/ConAuth)</li>
<li>Previous experience as a System Owner or Privacy POC for federal systems</li>
<li>Understanding of DoD privacy requirements and IL4/IL5 environments</li>
</ul>
Our Equal Employment Opportunity Policy
<br>The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.
<br>The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at accommodations@koniag-gs.com or by calling 703-488-9377 to request accommodations.
<br><br>
Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.
<br><br>
Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352

Privacy Engineer/Specialist

Cape Fox Federal Integrators

<div>Job Description:<p><br>
Cape Fox Federal Integrators (CFFI) is seeking an experienced Cybersecurity Engineer. This position is contingent upon award.</p>
<p><i>The salary range (or hiring range) for this position has been established at: $145,000.00 - $180,000.00</i></p>
<p><i>The above salary range represents the company&rsquo;s good faith and reasonable estimate of the range of possible compensation at the time of posting. In addition, for fulltime, benefit eligible positions we offer a variety of benefits including company holidays, paid time off, health insurance, dental insurance, vision insurance, life and disability insurance as well as 401K with company match.</i></p>
<p>Duties and responsibilities include:</p>
<ul><li>Apply knowledge and skills of information systems security principles, NIST guidelines, FISMA, CISA, and federal directives, to conduct ongoing security assessments of installed systems and networks with a view to recommend corrective actions.</li>
<li>Perform systems engineering and maintenance activities according to established standards.</li>
<li>Apply knowledge of Networking Technologies including LAN, MS Azure, and Wireless management in security solutions implementation and troubleshooting.</li>
<li>Develop NIGC security operations capabilities by evaluating current strategies and pursuing alignment with best practices.</li>
<li>Ensure the effective configuration and daily operations of tools that support the NIGC cybersecurity strategy. Such tools include SEIM integration, Syslog, Network Detection and Response (NDR), Endpoint Detection and Response (EDR), Firewalls, M365 Cloud security, Defender for Cloud, and Continuous Diagnostics &amp; Mitigation (CDM) capabilities.</li>
<li>In collaboration with CISO and Privacy Officer develop plans, techniques, and measurable objectives to improve the development of cybersecurity and privacy measures that meet NIGC goals for protecting sensitive information.</li>
<li>Collaborate with other teams on the integration of NIGC Applications and IT services to consider security implications and ensure that NIGC security requirements are met.</li>
<li>Maintain threat awareness and monitor NIGC information systems for exploits and any suspicious activities. Analyze aggregated logs from security tools and perform regular threat hunting activities.</li>
<li>Develop Security Orchestration and Automation capabilities.</li>
<li>Adhere to Continuous Monitoring practices to evaluate the effectiveness of implemented security controls and execute proactive threat hunting activities to ensure confidentiality, integrity, and availability of NIGC information systems.</li>
<li>Develop detection and response configuration policies to increase automation.</li>
<li>Execute Incident Response activities to include all associated actions according to the NIGC incident response plan.</li>
<li>Develop Incident handling procedures.</li>
<li>Validate that sufficient and relevant information is captured and retained from security tools to support actionable security awareness and incident investigations.</li>
<li>Collect security operations performance and NIGC security posture management metrics and prepare NIGC threat reports to inform risk management decisions.</li>
<li>Develop and maintain accurate security operations documentation including the preparation of standard operating procedures for recurring tasks.</li>
</ul>
<p>Plans and designs security solutions and capabilities that enable the organization to identify, protect, detect, respond, and recover from cyber threats and vulnerabilities. Defines and develops security requirements using risk assessments, threat modeling, testing, and analysis of existing systems. Develops security integration plans to protect existing infrastructure and to incorporate future solutions. Creates action plans for policy creation and governance, system hardening, monitoring, incident response, disaster recovery, and emerging cybersecurity threats. Utilizes security information and event management (SEIM), data loss prevention (DLP), intrusion prevention systems (IPS), and other tools in action plan designs. Reviews current architectures and systems to ensure consistency and compliance with the organization's guidelines, policies, and standards. Keeps abreast of the latest cyber threat information. Typically requires a bachelor's degree.</p><br>
<p></p>
<br>
<br>
<b>Job Requirements:</b><br>
<ul>
<li>Bachelor's Degree</li>
<li>Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP) desired.</li>
<li>Must be willing to complete applicable background investigations, obtain and maintain a Public Trust clearance, execute a Non-Disclosure Agreement (NDA), comply with all NIGC policies, and acknowledge and sign the NIGC Rules of Behavior</li>
<li>Authorization to work in the United States without sponsorship as defined by the Immigration Reform Act of 1986.</li>
</ul>
<p>#CJ</p></div>

Cybersecurity Engineer

Resilience

<div><div><p><b>About Us</b></p>
<p>
At Resilience, we're creating a new category that integrates cybersecurity, cyber insurance, and cyber risk management. Founded in 2016 by experts from across the highest tiers of the US military and intelligence communities &ndash; and built by prominent leaders and innovators from the insurance, technology, and cybersecurity industries &ndash; Resilience is rewriting the rules of how cyber risk is assessed, measured, and managed.</p>
<p>
Our integrated cyber risk solutions connect risk quantification software, cybersecurity experts, and A+ rated cyber insurance, all purpose-built for middle and large organizations. We are a cybersecurity company, a Cyber and Tech E&amp;O-focused MGA, a fintech startup, and a data science powerhouse, all purposefully built into one.</p>
<p>
Resilience is proud to be backed by leading technology investment firms, including General Catalyst, Lightspeed Venture Partners, Intact Ventures, Founders Fund, CRV, and Shield Capital.</p></div><div><b>
The Hook: Why this role matters now</b></div>
<div>Step into a critical role to build, defend, and scale the security posture of our category-defining SaaS platform and internal corporate systems. As a Security Engineer, you won't just monitor alerts or patch vulnerabilities; you will take complete ownership of engineering proactive guardrails, automating incident response workflows, and securing emerging technologies like AI and machine learning. Operating at the highly collaborative intersection of Security, IT, and DevOps, you will aggressively dig into legacy processes to architect permanent, automated fixes rather than applying temporary patches.</div>
<div></div>
<div><b>The Mission: What you will achieve in the first 6 months</b></div>
<div>In your first six months, you will take full accountability for designing and maintaining automated response playbooks using orchestration workflows (e.g., n8n, Tines, or XSOAR) to heavily reduce manual intervention. You will pioneer our agentic security engineering efforts by developing custom SecOps applications and autonomous workflows that seamlessly triage alerts and accelerate our defense capabilities. Furthermore, you will completely own cloud infrastructure security by implementing &quot;Infrastructure as Code&quot; (Terraform) across our multi-cloud footprint (AWS/GCP), while establishing robust security guardrails for AI platforms and developer tools to mitigate risks like prompt injection and data leakage.</div>
<div></div>
<div><b>The Toolkit:</b></div>
<ul><li>4+ years of experience in a Security Engineering, DevSecOps, or high-level SecOps role. You must possess a relentless automation mindset with proven ability in Python, Go, or low-code orchestration platforms.
</li><li>You need hands-on proficiency securing AWS or GCP services (IAM, WAF/ALB, Fargate/Lambda), deep experience with Infrastructure as Code (Terraform/CloudFormation/Pulumi) within a Git-based CI/CD workflow, and practical experience using agentic AI tools (e.g., Cursor, Claude Code, GitHub Copilot) to accelerate code development and security auditing.</li>
<li>Experience securing &quot;Agentic&quot; developer tools and AI coding assistants, with a practical understanding of governing model traffic via AI Gateways and the Model Context Protocol (MCP).
</li><li>Familiarity with container security, zero-trust networking (Zscaler), EDR (Crowdstrike/SentinelOne), and managing endpoint security profiles (MDM/JAMF).</li>
</ul><div><b>The Culture: How we work</b></div>
<div>We move fast, operate with zero ego, and embrace a bias to action. You will work cross-functionally alongside DevOps and IT to seamlessly balance rigorous security requirements with developer velocity.</div><div><p><b>
What Resilience Offers You</b></p>
<p>
Innovative company culture</p>
<p>
Flexible work schedules</p>
<p>
Family paid leave</p>
<p>
Paid healthcare for employees</p>
<p>
401k/Pension</p>
<p>
Professional development &amp; career advancements</p>
<p>
Flexible paid time off</p>
<p>
Employee referral bonus</p>
<p><b>
Accommodations and Accessibility</b></p>
<p>
We want to ensure you're able to perform as well as possible in your interview. As part of that, if you have any accessibility-related needs to ensure a comfortable visit, please let us know. We'll do our best to provide reasonable accommodations to suit your working style during your interview and if you join our team.</p>
<p>
If you require a reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please let your recruiter contact know.</p>
<p><b>
Beware of Job Scams</b></p>
<p>
Resilience is excited to welcome talented individuals to explore career opportunities with us. However, we urge you to stay vigilant against recruitment scams where fraudsters may impersonate our company. We will never ask for payments, conduct interviews via chat rooms, or contact candidates from personal email accounts. All job applications must be submitted through our official platform at greenhouse.io , and interviews will only take place via approved Resilience accounts. If you receive suspicious outreach or have concerns, please let your recruiter contact know. Thank you for helping us maintain a safe and secure recruitment process.</p></div></div>

Security Engineer

Peraton

<div><div><h5 class="jobSectionHeader"><b>ABOUT PERATON</b></h5><p>
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world&rsquo;s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we&rsquo;re keeping people around the world safe and secure.</p></div><div><h5 class="jobSectionHeader"><b>
ABOUT THE ROLE</b></h5><div><div>
Peraton is seeking a <b>Senior Cybersecurity Engineer (SME)</b> to support a federal customer&rsquo;s <b>Virtual Security Operations Center (vSOC)</b>.</div><div><br>
</div><div><b>Location: Washington, DC</b></div><div></div><div><br>
This individual will serve as the technical lead for SIEM operations, detection engineering, and advanced security analytics, leveraging Microsoft Sentinel and the Microsoft Defender security stack.</div><div></div><div><br>
The ideal candidate is a hands-on technical expert who can operate at both the engineering and operational levels, ensuring comprehensive monitoring, high-fidelity detection, and actionable intelligence across enterprise environments.</div><div>
This role directly supports mission-critical cybersecurity operations protecting sensitive federal data (CUI/PII/PHI/FTI) and aligns to Zero Trust and NIST-based security frameworks.</div><div></div><div><b><br>
What You&rsquo;ll Do</b></div><div><b>
Lead Microsoft Sentinel Operations</b></div><ul><li>
Serve as the primary SME for Microsoft Sentinel, the enterprise SIEM platform
</li><li>Design, implement, and optimize analytics rules, correlation logic, and data models
</li><li>Develop advanced KQL queries, workbooks, and dashboards to support SOC operations and reporting
</li><li>Ensure all monitoring and analytics align to the Microsoft Sentinel data model
</li></ul><div><b>Drive Detection Engineering &amp; Threat Analytics</b></div><ul><li>
Lead development and continuous tuning of MITRE ATT&amp;CK-aligned detection use cases
</li><li>Implement cross-domain correlation logic spanning identity, endpoint, network, and cloud telemetry
</li><li>Perform and guide proactive threat hunting activities
</li><li>Continuously improve detection capabilities based on:
</li><ul><li>Threat intelligence
</li><li>Incident response findings
</li><li>Red team and assessment results
</li></ul></ul><div><b>Integrate and Optimize Microsoft Security Stack</b></div><ul><li>
Leverage and optimize:
</li><ul><li>Microsoft Defender for Endpoint (MDE) for endpoint visibility
</li><li>Microsoft Defender for Identity (MDI) for Active Directory and identity monitoring
</li></ul><li>Ensure all Defender telemetry is:
</li><ul><li>Properly ingested into Sentinel
</li><li>Actively monitored and correlated
</li><li>Optimized for detection and response
</li></ul></ul><div><b>Engineer Multi-Source Log Ingestion &amp; Normalization</b></div><ul><li>
Lead ingestion and integration of non-Microsoft data sources, including:
</li><ul><li>AWS CloudTrail and VPC Flow Logs
</li><li>Proofpoint email security logs
</li><li>Veeam backup logs
</li><li>Checkpoint and Cisco network/security logs
</li><li>iBoss proxy logs
</li><li>VPN and remote access logs
</li></ul><li>Ensure all telemetry is:
</li><ul><li>Normalized to Sentinel schema</li><li>
Aligned for cross-plane correlation
</li><li>Optimized for detection engineering and threat hunting
</li></ul></ul><div><b>Ensure Data Integrity &amp; Pipeline Health</b></div><ul><li>
Oversee ingestion pipelines to ensure:
</li><ul><li>Log integrity and completeness</li><li>
Accurate timestamping and synchronization
</li><li>Proper schema mapping and field normalization
</li></ul><li>Monitor ingestion health to identify:
</li><ul><li>Dropped or malformed logs
</li><li>Latency or ingestion failures
</li></ul><li>Configure and manage log routing tools (e.g., Cribl), ensuring:
</li><ul><li>No data loss
</li><li>Preservation of original log fidelity
</li></ul></ul><div><b>Enable Cross-Plane Security Visibility</b></div><ul><li>
Implement and maintain end-to-end visibility across:
</li><ul><li>Identity
</li><li>Endpoint
</li><li>Network
</li><li>Cloud
</li></ul><li>Develop correlation strategies that:
</li><ul><li>Map to MITRE ATT&amp;CK techniques
</li><li>Support advanced threat detection
</li><li>Enable full attack path analysis
</li></ul></ul><div><b>Deliver Operational Reporting &amp; Dashboards</b></div><ul><li>
Build and maintain real-time dashboards and automated reporting within Sentinel
</li><li>Provide visibility into:
</li><ul><li>Detection performance (MTTD/MTTR)
</li><li>Log ingestion health
</li><li>Threat trends and risk posture
</li></ul><li>Support delivery of:
</li><ul><li>Operational SOC reporting
</li><li>Executive-level insights
</li><li>Compliance and audit artifacts
</li></ul></ul><div><b>Mentor and Lead Technical Teams</b></div><ul><li>
Serve as a technical escalation point and mentor for SOC analysts (Tier I&ndash;III)
</li><li>Provide guidance on:
</li><ul><li>Detection strategy
</li><li>Log onboarding
</li><li>Security architecture improvements
</li></ul><li>Collaborate with:
</li><ul><li>Incident Response teams
</li><li>Cloud and infrastructure teams</li><li>
Government stakeholders</li></ul></ul></div></div><div></div><div><h5 class="jobSectionHeader"><b><br>
QUALIFICATIONS</b></h5><div><div><b>
Required:</b></div><div></div><div><b><br>
Education &amp; Experience:
</b></div><ul><li>Bachelors degree and a minimum of 8 years of relevant experience. An additional 4 years of experience in lieu of degree.</li><li>
Minimum of 8 years of cybersecurity experience, including:<ul><li>
5+ years in SOC, SIEM, or detection engineering roles
</li><li>3+ years of hands-on experience with Microsoft Sentinel
</li></ul></li><li><b>Technical Skills</b><ul><li>
Deep expertise in:
<ul><li>Microsoft Sentinel (analytics, KQL, data models)
</li><li>Microsoft Defender for Endpoint (MDE)
</li><li>Microsoft Defender for Identity (MDI)
</li></ul></li><li>Strong experience with:
<ul><li>Log ingestion, normalization, and schema mapping
</li><li>Multi-source telemetry integration (cloud, network, endpoint)
</li><li>AWS logging (CloudTrail, VPC Flow Logs)
</li></ul></li><li>Knowledge of:
<ul><li>MITRE ATT&amp;CK framework
</li><li>SIEM/XDR integration
</li><li>Log routing tools (e.g., Cribl, Logstash, Fluentd)</li></ul></li></ul></li><li><b>
U.S citizenship required</b></li><li><b>
Ability to obtain Top Secret Clearance</b></li></ul><div></div><div><b><br>
Preferred:</b></div><ul><li>
Relevant certifications:
</li><ul><li>CISSP, GCIA, GCIH, CEH, or equivalent
</li><li>Microsoft Security certifications (Sentinel, Defender)
</li><li>AWS Security certifications
</li><li>Privacy certifications (e.g., CIPP/US, CIPM) where applicable
</li></ul><li>Experience supporting:
</li><ul><li>Federal civilian agencies
</li><li>NIST-based frameworks (800-53, 800-61, 800-92)
</li><li>Zero Trust architectures
</li></ul></ul><div><b>What Sets You Apart</b></div><ul><li>
Ability to operate as both a <b>hands-on engineer and strategic technical leader</b>
</li><li>Experience building <b>detection capabilities from the ground up</b>
</li><li>Strong understanding of <b>identity-centric security and Zero Trust principles</b>
</li><li>Proven ability to <b>optimize security operations for efficiency and cost</b></li></ul></div></div><div></div><div><h5 class="jobSectionHeader"><b><br>
DETAILS</b></h5><div><p>
<b>Target Salary Range:</b> $135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual&rsquo;s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
</p></div><div><p>
<b>Benefits Statement:</b> Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
</p></div><div><p>
<b>Application Statement:</b> The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.
</p></div><p><b>
EEO:</b> Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</p></div></div><div></div>

SENIOR CYBERSECURITY ENGINEER (SME)

Metrostar Systems

<div><p>As a <b>Sr. Identity &amp; Access Management (IAM) Engineer I</b>, you'll work as part of a collaborative and high-performing team providing your expertise to deliver solutions within the highest levels of the federal government.</p>
<p>
We know that you can't have great technology services without amazing people. At MetroStar, we are <b>obsessed </b>with<b> </b>our people and have led a two-decade legacy of building the best and brightest teams. Because we know our future relies on our deep understanding and relentless focus on our people, we live by our mission: A passion for our people. Value for our customers.</p>
<p>
If you think you can see yourself delivering our mission and pursuing our goals with us, then check out the job description below!</p>
<p><b>
What you'll do:</b></p>
<ul>
<li>Configure, maintain, and optimize identity management systems and federation solutions in a complex, mission-critical environment.</li>
<li>Ensure secure access, compliance, and automation across enterprise systems.</li>
<li>Assist the customer in design, deployment and maintenance of identity management and access systems remote monitoring and management capabilities.</li>
<li>Establish and maintain a high level of customer trust and confidence with your active directory knowledge and skills.</li>
<li>Creatively think out of the box to help with troubleshooting and support and provide innovative solutions that fit customers' needs.</li>
</ul>
<p><b>What you'll need to succeed:</b></p>
<ul>
<li>Active Top Secret with current or previously held SCI access.</li>
<li>BA/BS degree; relevant experience can be substituted.</li>
<li>5 years of relevant experience supporting projects of similar size, scope, and complexity.</li>
<li>Proven experience configuring, implementing, and maintaining identity management platforms and federation solutions (e.g., SAML, OAuth, OpenID Connect).</li>
<li>Ability to perform day-to-day support activities using industry-standard IAM tools.</li>
<li>Skilled in monitoring and maintaining compliance scanning tools to ensure operational integrity.</li>
<li>Experience developing and supporting automation and orchestration processes for IAM services.</li>
<li>Strong troubleshooting skills for identity-related issues in high-availability environments.</li>
<li>Familiarity with authentication, authorization, and access control principles.</li>
</ul>
<p><b>This position is designated as essential personnel supporting continuity of operations and may require work during government shutdowns, emergencies, or other critical situations.</b></p>
<p>
SALARY RANGE: $147,000 - $171,000</p>
<p>
The salary range for this position is determined based on qualifications, skills, and relevant experience. The final salary offered will be determined based on several factors including:</p>
<ul>
<li>The candidate's professional background and relevant work experience</li>
<li>The specific responsibilities of the role and organizational needs</li>
<li>Internal equity and alignment with current team compensation</li>
<li>This role is also eligible for additional compensation, subject to the terms and policies of MetroStar, which may include:</li>
<li><ul><li>Performance-based bonuses</li>
<li>Company-paid training and/or certifications</li>
<li>Referral bonuses</li>
</ul></li>
</ul><div><p><i>To apply for this position, please submit your resume via the form below or through our careers page: </i><i>https://www.metrostar.com/jobs/</i></p>
<p><b>
Application Deadline:</b> Applications will be accepted on a rolling basis until the position is filled; candidates are encouraged to apply as early as possible for full consideration.</p>
<p><b>
Additional Compensation</b>: This role may also be eligible for bonuses and/or additional incentives based on individual and company performance.</p>
<p><b>
Benefits</b>: All full-time employees are eligible to participate in our benefits programs:</p>
<ul>
<li>Health, dental, and vision insurance</li>
<li>401(k) retirement plan with company match</li>
<li>Paid time off (PTO) and holidays</li>
<li>Parental Leave and dependent care</li>
<li>Flexible work arrangements</li>
<li>Professional development opportunities</li>
<li>Employee assistance and wellness programs</li>
</ul>
<p>Like we said, <b>we are </b>big fans of our people. That's why <b>we offer</b> a generous benefits package, professional growth, and valuable time to recharge. Learn more about our company culture code and benefits. Plus, check out our accolades.</p>
<p><b>
Commitment to Non-Discrimination</b><br>
All qualified applicants will receive consideration for employment based on merit and without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.</p>
<p>
 <b>What we want you to know:</b></p>
<p>
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.</p>
<p>
 <b>Not ready to apply now?</b></p>
<p>
Sign up to join our newsletter here.</p></div></div>

Sr. Identity & Access Management (IAM) Engineer I (6226)

Explore 533+ Information security engineer in Washington this May. Find roles across top companies and apply now to boost your career.