staff engineer - regulatory technology Jobs in Washington

staff engineer - regulatory technology

comsec information security specialist Jobs in Washington

comsec information security specialist

cybersecurity engineer Jobs in Washington

cybersecurity engineer

cybersecurity operations engineer Jobs in Washington

cybersecurity operations engineer

information security analyst Jobs in Washington

information security analyst

security engineer

Resilience

<div><div><p><b>About Us</b></p>
<p>
At Resilience, we're creating a new category that integrates cybersecurity, cyber insurance, and cyber risk management. Founded in 2016 by experts from across the highest tiers of the US military and intelligence communities &ndash; and built by prominent leaders and innovators from the insurance, technology, and cybersecurity industries &ndash; Resilience is rewriting the rules of how cyber risk is assessed, measured, and managed.</p>
<p>
Our integrated cyber risk solutions connect risk quantification software, cybersecurity experts, and A+ rated cyber insurance, all purpose-built for middle and large organizations. We are a cybersecurity company, a Cyber and Tech E&amp;O-focused MGA, a fintech startup, and a data science powerhouse, all purposefully built into one.</p>
<p>
Resilience is proud to be backed by leading technology investment firms, including General Catalyst, Lightspeed Venture Partners, Intact Ventures, Founders Fund, CRV, and Shield Capital.</p></div><div><b>
The Hook: Why this role matters now</b></div>
<div>Step into a critical role to build, defend, and scale the security posture of our category-defining SaaS platform and internal corporate systems. As a Security Engineer, you won't just monitor alerts or patch vulnerabilities; you will take complete ownership of engineering proactive guardrails, automating incident response workflows, and securing emerging technologies like AI and machine learning. Operating at the highly collaborative intersection of Security, IT, and DevOps, you will aggressively dig into legacy processes to architect permanent, automated fixes rather than applying temporary patches.</div>
<div></div>
<div><b>The Mission: What you will achieve in the first 6 months</b></div>
<div>In your first six months, you will take full accountability for designing and maintaining automated response playbooks using orchestration workflows (e.g., n8n, Tines, or XSOAR) to heavily reduce manual intervention. You will pioneer our agentic security engineering efforts by developing custom SecOps applications and autonomous workflows that seamlessly triage alerts and accelerate our defense capabilities. Furthermore, you will completely own cloud infrastructure security by implementing &quot;Infrastructure as Code&quot; (Terraform) across our multi-cloud footprint (AWS/GCP), while establishing robust security guardrails for AI platforms and developer tools to mitigate risks like prompt injection and data leakage.</div>
<div></div>
<div><b>The Toolkit:</b></div>
<ul><li>4+ years of experience in a Security Engineering, DevSecOps, or high-level SecOps role. You must possess a relentless automation mindset with proven ability in Python, Go, or low-code orchestration platforms.
</li><li>You need hands-on proficiency securing AWS or GCP services (IAM, WAF/ALB, Fargate/Lambda), deep experience with Infrastructure as Code (Terraform/CloudFormation/Pulumi) within a Git-based CI/CD workflow, and practical experience using agentic AI tools (e.g., Cursor, Claude Code, GitHub Copilot) to accelerate code development and security auditing.</li>
<li>Experience securing &quot;Agentic&quot; developer tools and AI coding assistants, with a practical understanding of governing model traffic via AI Gateways and the Model Context Protocol (MCP).
</li><li>Familiarity with container security, zero-trust networking (Zscaler), EDR (Crowdstrike/SentinelOne), and managing endpoint security profiles (MDM/JAMF).</li>
</ul><div><b>The Culture: How we work</b></div>
<div>We move fast, operate with zero ego, and embrace a bias to action. You will work cross-functionally alongside DevOps and IT to seamlessly balance rigorous security requirements with developer velocity.</div><div><p><b>
What Resilience Offers You</b></p>
<p>
Innovative company culture</p>
<p>
Flexible work schedules</p>
<p>
Family paid leave</p>
<p>
Paid healthcare for employees</p>
<p>
401k/Pension</p>
<p>
Professional development &amp; career advancements</p>
<p>
Flexible paid time off</p>
<p>
Employee referral bonus</p>
<p><b>
Accommodations and Accessibility</b></p>
<p>
We want to ensure you're able to perform as well as possible in your interview. As part of that, if you have any accessibility-related needs to ensure a comfortable visit, please let us know. We'll do our best to provide reasonable accommodations to suit your working style during your interview and if you join our team.</p>
<p>
If you require a reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please let your recruiter contact know.</p>
<p><b>
Beware of Job Scams</b></p>
<p>
Resilience is excited to welcome talented individuals to explore career opportunities with us. However, we urge you to stay vigilant against recruitment scams where fraudsters may impersonate our company. We will never ask for payments, conduct interviews via chat rooms, or contact candidates from personal email accounts. All job applications must be submitted through our official platform at greenhouse.io , and interviews will only take place via approved Resilience accounts. If you receive suspicious outreach or have concerns, please let your recruiter contact know. Thank you for helping us maintain a safe and secure recruitment process.</p></div></div>

Security Engineer

MTSI

<div><div>MTSI is seeking a <b>Information Systems Security Engineer (ISSE)</b> whose primary function will be to serve as the Program Office&rsquo;s information security professional responsible for managing all aspects of an organization's information security system, including researching, testing, training, and implementing programs designed to safeguard sensitive information from possible compromise.</div><div>
</div><div>
Your essential job functions will include but may not be limited to:</div><ul><li>
The ISSE works with System Engineering teams to incorporate cyber resiliency objectives, techniques, and design principles into all system engineering and development efforts throughout the systems development life cycle (SDLC).</li><li>
Develop and maintain documentation and diagrams for security tools, system environments, and cloud operations</li><li>
Perform requirements analysis, design, and integration for complex software applications and collaboration infrastructures</li><li>
Participate in the change management process, including reviewing Change Requests and assisting in the assessment of security impact of proposed changes</li><li>
Write implementation and design documents describing how security features are implemented</li><li>
Create and maintain information system security documentation, Standard Operating Procedures (SOP), and provide guidance on active Plans of Action and Milestones (POA&amp;M)</li><li>
Conduct periodic and continuous monitoring of the system, procedures, and documentation to ensure compliance with the authorization package</li></ul><div></div><div><b><br>
Required:</b></div><ul><li>
15+ years' technical experience in cybersecurity, information technology, or systems engineering</li><li>
Must have experience working with Special Access Programs (SAPs)</li><li>
Strong proficiency fault tolerance, and Reliability, Maintainability, Availability (RMA) subject matter.</li><li>
Must possess excellent analytical skills and be capable of quantifying risk to enterprise systems and level of compliance with security policy</li><li>
Excellent communication skills (verbal and written) required</li></ul><div></div><div><b><br>
Advanced knowledge in one or more of the following areas:</b></div><ul><li>
Java, Python, Ruby and/or C++</li><li>
Linux Expertise (RedHat/RHEL or CentOS preferred)</li><li>
Dynamic &amp; Static Application Security Scanning (e.g., Arachni, OWASP ZAP, BurpSuite, Fortify, Checkmarx, etc.)</li><li>
Virtualization and containers (EC2, Docker)</li><li>
Infrastructure Security Scanning, Vulnerability Scanning (Twistlock, ACAS/Nessus)</li></ul><div></div><div><b><br>
Certifications:</b></div><ul><li>
Certified Information Systems Security Professional (CISSP).</li><li>
Certified Cloud Security Professional (CCSP).</li><li>
Information Systems Security Engineering Professional (ISSEP)</li><li>
DOD Information Technology Security Certification and Accreditation Process (DITSCAP)</li><li>
DOD Information Assurance Certification and Accreditation Process (DIACAP)</li></ul><div></div><div><b><br>
Education Requirements:</b></div><ul><li>
Bachelors Degree in related discipline or an additional 4 years of experience in lieu of a Degree</li></ul><div></div><div><b><br>
Clearance Requirements:</b></div><ul><li>
Current/active Top Secret/SCI; Current or recent DoD SAP access</li></ul><div></div><div><br>
</div><div>
#LI-LS1</div><div>
#mtsi</div><div>
#lawrenciumsaskatchewantrout</div><div>
#LI-Onsite</div></div>
<br>
TS/SCI
<br>
<div><h1 class="jobSectionHeader"><b>Perks and Benefits</b></h1><ul><li><div><div><i>
Vacation:</i></div><div>
New Hires Accrue 20 days of PTO and 10 Holidays per Year</div></div></li><li><div><div><i>
Health Insurance:</i></div><div>
Zero Deductible Health Plans</div></div></li><li><div><div><i>
Flexible Schedules:</i></div><div>
Flex Schedules</div></div></li><li><div><div><i>
Professional Development:</i></div><div>
Up to $10,000 Annual Education/Training Reimbursement
</div></div></li><li><div><div><i>ESOP:</i></div><div>
Funded Stock Ownership Plan</div></div></li><li><div><div><i>
401k Match+:</i></div><div>
6% 401k Match + Immediate Vesting
</div></div></li><li><div><div><i>Bonus Program:</i></div><div>
Semi-Annual Bonus Opportunity
</div></div></li><li><div><div><i>Mentorship:</i></div><div>
Career Mentorship Programs
</div></div></li></ul><h3 class="jobSectionHeader"><b>Why is MTSI a great place to work</b></h3><ul><li><div><div><i>
Interesting Work:</i></div><div>
Our co-workers support some of the most important and critical programs to our national defense and security.</div></div></li><li><div><div><i>
Values:</i></div><div>
Our first core value is that employees come first. We challenge our co-workers to provide the highest level of support and service, and reward them with some of the best benefits in the industry.</div></div></li><li><div><div><i>
100% Employee Owned:</i></div><div>
We have a stake in each other's success, and the success of our customers. It's also nice to know what's going on across the company; we have company wide town-hall meetings three times a year.</div></div></li><li><div><div><i>
Great Benefits - Most Full-Time Staff Are Eligible for:</i></div></div></li><li><ul><li><div>
Starting PTO accrual of 20 days PTO/year + 10 holidays/year</div></li><li><div>
Flexible schedules</div></li><li><div>
6% 401k match with immediate vesting up to $9k annually</div></li><li><div>
Semi-annual bonus eligibility (July and Decemeber)</div></li><li><div>
Company funded Employee Stock Ownership Plan (ESOP) - a separate qualified retirement account</div></li><li><div>
Up to $10,000 in annual educational reimbursement</div></li><li><div>
Other company funded benefits, like life and disability insurance</div></li><li><div>
Optional zero deductible Blue Cross/Blue Shield health insurance plan</div></li></ul></li><li><div><div><i>
Track Record of Success:</i></div><div>
We have grown every year since our founding in 1993.
</div></div></li></ul><p>Modern Technology Solutions, Inc. (MTSI) is a 100% employee-owned engineering services and solutions company that provides high-demand technical expertise in Digital Transformation, Modeling and Simulation, Rapid Capability Development, Test and Evaluation, Artificial Intelligence, Autonomy, Cybersecurity and Mission Assurance</p><p>
MTSI delivers capabilities to solve problems of global importance. Founded in 1993, MTSI today has employees at over 20 offices and field sites worldwide.</p><p>
For more information about MTSI, please visitwww.mtsi-va.com</p><h4 class="jobSectionHeader"><b>
EEO Statement</b></h4><div><div><div><p>
MTSI embraces nine core values including our first core value of Employees come first. Consistent with our Core Values, we are committed to Equal Opportunity, making decisions without regard to race, color, religion, sex, national origin, age, military/veteran status, disability, or any other characteristics protected by applicable law. MTSI is committed to Equal Employment Opportunity and providing reasonable accommodations to applicants and employees with physical and/or mental disabilities.</p></div></div></div></div>
<br>
<div><h3 class="jobSectionHeader"><b>Why is MTSI a great place to work</b></h3><ul>
<li><b>Interesting Work: </b>Our co-workers support some of the most important and critical programs to our national defense and security.
</li><li><b>Values: </b>Our first core value is that employees come first. We challenge our co-workers to provide the highest level of support and service, and reward them with some of the best benefits in the industry.
</li><li><b>100% Employee Owned: </b>We have a stake in each other's success, and the success of our customers. It's also nice to know what's going on across the company; we have company wide town-hall meetings three times a year.
</li><li><b>Great Benefits - Most Full-Time Staff Are Eligible for:
</b></li><li><ul><li>Starting PTO accrual of 20 days PTO/year + 10 holidays/year
</li><li>Flexible schedules
</li><li>6% 401k match with immediate vesting up to $9k annually
</li><li>Semi-annual bonus eligibility (July and Decemeber)
</li><li>Company funded Employee Stock Ownership Plan (ESOP) - a separate qualified retirement account
</li><li>Up to $10,000 in annual educational reimbursement
</li><li>Other company funded benefits, like life and disability insurance
</li><li>Optional zero deductible Blue Cross/Blue Shield health insurance plan
</li></ul></li><li><b>Track Record of Success: </b>We have grown every year since our founding in 1993.
</li></ul><p>Modern Technology Solutions, Inc. (MTSI) is a 100% employee-owned engineering services and solutions company that provides high-demand technical expertise in Digital Transformation, Modeling and Simulation, Rapid Capability Development, Test and Evaluation, Artificial Intelligence, Autonomy, Cybersecurity and Mission Assurance</p>
<p>
MTSI delivers capabilities to solve problems of global importance. Founded in 1993, MTSI today has employees at over 20 offices and field sites worldwide.</p>
<p>
For more information about MTSI, please visit www.mtsi-va.com</p></div>

Information Systems Security Engineer (ISSE)

Client Server Software Solutions

<div><div><div><div><p><b>Job Description and Tasks</b>:</p><p>
The contractor shall assist, advise, and guide the MARS developers through the Risk Management Framework (RMF). The contractor will apply knowledge and understanding of information assurance (IA) concepts, practices. and procedures using established JC, DoD, and DIA policies and standards to minimize and/or mitigate RMF security risks.</p><p>
The contractor will review and comment on technical documentation to ensure compliance with security standards and regulations. The contractor will recommend security monitoring solutions as required to meet IA requirements for RMF. The contractor will guide the MARS PMO developers through successful assessment and authorization of system components to obtain required authorization to operate.</p><p>
The contractor will coordinate closely with MARS PMO developers and DIA/CIO cybersecurity team to support, monitor, test, and troubleshoot software and hardware IA problems related to RMF.</p><p>
The contractor will identify, design, develop, and implement security procedures and security-embedded solutions appropriate to the environment with the help of vendor resources in an agile cadence.</p><p><b>
Qualifications</b></p><p><b>
Education:</b></p><p>
Bachelor's degree in a relevant discipline (e.g., Information Assurance, Information Security System Engineering)</p><p><b>
Minimum Experience Required:</b></p><p>
8-12 years&rsquo; work experience with the Department of Defense. (DoD) or Intelligence Community (IC).</p><p><b>
Preferred Experience Required:</b> None specified.</p><p><b>
Certifications:</b> Mandatory Certification: Security+ CE.</p><p>
Professional certifications such as CTSM, CISSP, CCNA are desired but not required.</p><p><b>
Security Clearance</b>:</p><p>
This position requires TOP SECRET clearance/Sensitive Compartmentalized Information (SCI) eligibility with a Counterintelligence (CI) Polygraph.</p><p><b>
About The Organization</b></p><p>
Constellation West is an award winning company that delivers Information Technology (IT) engineering services and solutions and non-IT subject matter expertise worldwide. Established in 1997, Constellation West is an industry leader, partnering with key organizations. As a prime contractor or preferred subcontractor, we have a continual list of opportunities to fill nationwide with multiple agencies such as the Department of Veteran Affairs, the Department of Defense, civilian agencies, and the national intelligence community. Many positions supporting the U.S. federal government require our employees to be granted security clearances.</p><p>
Constellation West strives to provide fully integrated solutions that cover all aspects of system and network engineering, administration, and management. We believe in attracting the right people ready to take on exciting challenges and be part of a dynamic team. Are you one of them? Do you have the expertise and knowledge to solve complex problems? If yes, join us and be a part of an exhilarating work environment that rewards your hard work and dedication. Don't miss out on this amazing opportunity to make a difference!</p><p>
Benefits include but are not limited to:</p><ul><li>Tuition reimbursement</li><li>Competitive 401(k) plan</li><li>Competitive Health Benefits</li><li>11 Paid Holidays!!</li><li>15 PTO Days!</li><li>Veteran Hiring Preference</li></ul><p>
Constellation West is proud to be an EEO/AA employer M/F/D/V</p></div></div></div></div>

Information Systems Security Engineer

Metrostar Systems

<div><p>As a <b>Sr. DevSecOps Engineer II</b>, you'll design, implement, and sustain secure, automated CI/CD pipelines and infrastructure across hybrid on‐premises and cloud environments. This role integrates security controls directly into DevOps workflows, enabling continuous compliance, monitoring, and resilient system operations. The engineer partners closely with cybersecurity and infrastructure teams to support secure platform migrations, enforce hardened configurations, and ensure system integrity within classified and mission‐critical environments.</p>
<p>
The ideal candidate brings strong experience with Infrastructure as Code (IaC), containerized platforms, and CI/CD automation, along with a deep understanding of security frameworks such as RMF, NIST 800‐53, and STIGs. An active TS/SCI clearance is required, and experience supporting enclave-based or air‐gapped systems is highly valued.</p>
<p>
We know that you can't have great technology services without amazing people. At MetroStar, we are <b>obsessed </b>with<b> </b>our people and have led a two-decade legacy of building the best and brightest teams. Because we know our future relies on our deep understanding and relentless focus on our people, we live by our mission: A passion for our people. Value for our customers.</p>
<p><b>
What you'll do:</b></p>
<ul>
<li>Design, implement, and maintain secure CI/CD pipelines for deployment of security tools and supporting infrastructure.</li>
<li>Automate infrastructure provisioning using Infrastructure as Code (IaC) across on-prem VMware and cloud environments.</li>
<li>Integrate security controls (SAST, DAST, container scanning, compliance checks) into DevOps workflows.</li>
<li>Support migration of security platforms into a dedicated enclave, ensuring minimal downtime and data integrity.</li>
<li>Collaborate with cybersecurity and infrastructure teams to enforce secure configurations and continuous monitoring.</li>
<li>Implement logging, monitoring, and alerting pipelines for system and application health.</li>
</ul>
<p><b>What you'll need to succeed:</b></p>
<ul>
<li>Active TS/SCI security clearance.</li>
<li>5+ years of hands‐on DevSecOps experience in secure or classified environments, with 8+ years of overall experience in DevSecOps or related engineering disciplines.</li>
<li>Experience with Infrastructure-as-Code tools (e.g., Terraform, CloudFormation, Ansible).</li>
<li>Experience with Containerization and Orchestration tools (e.g., Docker and Kubernetes).</li>
<li>Experience with CI/CD tools (e.g., Jenkins, GitLab CI/CD, Azure DevOps).</li>
<li>Experience with hybrid environments such as VMware and Cloud platforms (e.g., AWS, Azure, GCP).</li>
<li>Experience implementing security compliance frameworks (e.g., RMF, NIST 800-53, STIGs), and integrating security tools into pipelines (e.g., vulnerability scanning, secrets management).</li>
<li>Proficiency with Python, Bash, or PowerShell.</li>
</ul>
<p>SALARY RANGE: $170,000 - $193,000</p>
<p>
The salary range for this position is determined based on qualifications, skills, and relevant experience. The final salary offered will be determined based on several factors including:</p>
<ul>
<li>The candidate's professional background and relevant work experience</li>
<li>The specific responsibilities of the role and organizational needs</li>
<li>Internal equity and alignment with current team compensation</li>
<li>This role is also eligible for additional compensation, subject to the terms and policies of MetroStar, which may include:</li>
<li><ul><li>Performance-based bonuses</li>
<li>Company-paid training and/or certifications</li>
<li>Referral bonuses</li>
</ul></li>
</ul><div><p><i>To apply for this position, please submit your resume via the form below or through our careers page: </i><i>https://www.metrostar.com/jobs/</i></p>
<p><b>
Application Deadline:</b> Applications will be accepted on a rolling basis until the position is filled; candidates are encouraged to apply as early as possible for full consideration.</p>
<p><b>
Additional Compensation</b>: This role may also be eligible for bonuses and/or additional incentives based on individual and company performance.</p>
<p><b>
Benefits</b>: All full-time employees are eligible to participate in our benefits programs:</p>
<ul>
<li>Health, dental, and vision insurance</li>
<li>401(k) retirement plan with company match</li>
<li>Paid time off (PTO) and holidays</li>
<li>Parental Leave and dependent care</li>
<li>Flexible work arrangements</li>
<li>Professional development opportunities</li>
<li>Employee assistance and wellness programs</li>
</ul>
<p>Like we said, <b>we are </b>big fans of our people. That's why <b>we offer</b> a generous benefits package, professional growth, and valuable time to recharge. Learn more about our company culture code and benefits. Plus, check out our accolades.</p>
<p><b>
Commitment to Non-Discrimination</b><br>
All qualified applicants will receive consideration for employment based on merit and without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.</p>
<p>
 <b>What we want you to know:</b></p>
<p>
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.</p>
<p>
 <b>Not ready to apply now?</b></p>
<p>
Sign up to join our newsletter here.</p></div></div>

Sr. DevSecOps Engineer II (6546)

Koniag Government Services

Koniag Data Solutions, a Koniag Government Services company, is seeking a Privacy Engineer/ Specialist to support KDS and our government customer in Washington, DC. Currently one day a week required onsite.
<br><br>
We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.
<br><br>
The ideal candidate will possess deep expertise in federal privacy regulations and frameworks, combined with strong technical skills in privacy, automation and engineering. This role requires a professional who can bridge the gap between privacy policy requirements and technical implementation, while developing innovative solutions to streamline privacy operations. Ability to obtain and maintain required federal security clearance. This position may be Remote or on-site depending on contract requirements.
<br><br>
The Privacy Engineer/Specialist will serve as a technical privacy expert, responsible for implementing, automating, and maintaining privacy compliance programs within federal government environments. This role combines privacy expertise with engineering skills to develop scalable, automated solutions for privacy operations.
<br><br>
Principal responsibilities will include but are not limited to:
<br><ul>
<li>Design, develop, and implement automated privacy compliance workflows and tools to support federal privacy requirements</li>
<li>Engineer technical solutions for privacy impact assessments (PIAs), system of records notices (SORNs), and privacy threshold analyses (PTAs)</li>
<li>Develop and maintain privacy automation scripts, tools, and platforms to streamline privacy documentation and compliance processes</li>
<li>Conduct privacy risk assessments and provide technical recommendations for privacy-enhancing technologies</li>
<li>Build and maintain privacy dashboards, reporting tools, and metrics tracking systems</li>
<li>Integrate privacy controls into system development lifecycle (SDLC) processes and DevSecOps pipelines</li>
<li>Automate privacy compliance monitoring, including data mapping, inventory management, and control validation</li>
<li>Collaborate with IT security, development, and operations teams to embed privacy-by-design principles</li>
<li>Develop technical documentation, including privacy architectures, data flow diagrams, and privacy control mappings</li>
<li>Implement and configure privacy management platforms and tools</li>
<li>Create automated solutions for breach notification, incident response, and privacy event management</li>
<li>Support privacy audits and assessments through automated evidence collection and reporting</li>
<li>Provide technical expertise on emerging privacy technologies, including AI/ML privacy considerations</li>
<li>Train technical and non-technical staff on privacy automation tools and processes</li>
<li>Stay current with federal privacy regulations, guidance, and best practices including OMB memoranda, NIST guidelines, and agency-specific requirements</li>
</ul>
<b>Education and Experience:</b><b>Required:</b><br>
<ul>
<li>Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or related field from an accredited college or university</li>
<li>3+ years of experience in privacy engineering, privacy compliance, or related roles within federal government environments</li>
<li>3+ years of experience with automation, scripting, or software development</li>
<li>Professional privacy certification (IAPP CIPM, CIPP/US, or CIPP/G)</li>
<li>Demonstrated experience implementing privacy automation solutions</li>
</ul>
<b>Security Requirement:</b><br>
<ul>
<li>Ability to obtain a Public Trust</li>
</ul>
<b>Required Skills and Competencies:</b><br>
<ul>
<li>Expert knowledge of federal privacy laws, regulations, and frameworks including:</li>
<li>Privacy Act of 1974</li>
<li>E-Government Act Section 208</li>
<li>Federal Information Security Modernization Act (FISMA)</li>
<li>OMB Circular A-130</li>
<li>NIST Privacy Framework</li>
<li>NIST Special Publications (800-53, 800-37, 800-122)</li>
<li>FedRAMP privacy requirements</li>
<li>Strong programming and scripting skills (Python, PowerShell, JavaScript, or similar)</li>
<li>Experience with API development and integration</li>
<li>Proficiency in database management and SQL</li>
<li>Experience with privacy management platforms (OneTrust, TrustArc, BigID, or similar)</li>
<li>Knowledge of data classification, data loss prevention (DLP), and data governance tools</li>
<li>Experience with workflow automation tools (Power Automate, Zapier, or similar)</li>
<li>Familiarity with cloud platforms (AWS, Azure, GCP) and their privacy features</li>
<li>Understanding of data architecture and data modeling</li>
<li>Experience with version control systems (Git, GitHub, GitLab)</li>
<li>Strong analytical and problem-solving skills</li>
<li>Excellent written and verbal communication skills for both technical and non-technical audiences</li>
<li>Ability to translate privacy requirements into technical specifications</li>
<li>Experience working in Agile/Scrum development environments</li>
<li>Proven ability to work independently and as part of cross-functional teams</li>
<li>Strong attention to detail and commitment to accuracy</li>
</ul>
<b>Desired Skills and Competencies:</b><br>
<ul>
<li>Master's degree in related field</li>
<li>Additional privacy certifications (CIPT, FIP, CDPSE, or similar)</li>
<li>Security certifications (CISSP, CISM, Security+)</li>
<li>Experience with Robotic Process Automation (RPA) tools</li>
<li>Knowledge of artificial intelligence and machine learning privacy considerations</li>
<li>Experience with data visualization tools (Tableau, Power BI)</li>
<li>Familiarity with identity and access management (IAM) systems</li>
<li>Experience with privacy-enhancing technologies (PETs) such as differential privacy, homomorphic encryption</li>
<li>Knowledge of records management and NARA requirements</li>
<li>Experience with ServiceNow or similar ITSM platforms</li>
<li>Background in system architecture or enterprise architecture</li>
<li>Experience supporting Privacy Impact Assessments (PIAs) in FedRAMP environments</li>
<li>Knowledge of Section 508 compliance and accessibility requirements</li>
<li>Experience with continuous monitoring and continuous authorization (ConMon/ConAuth)</li>
<li>Previous experience as a System Owner or Privacy POC for federal systems</li>
<li>Understanding of DoD privacy requirements and IL4/IL5 environments</li>
</ul>
Our Equal Employment Opportunity Policy
<br>The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.
<br>The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at accommodations@koniag-gs.com or by calling 703-488-9377 to request accommodations.
<br><br>
Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.
<br><br>
Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352

Privacy Engineer/Specialist

Peraton

<div><div><h5 class="jobSectionHeader"><b>ABOUT PERATON</b></h5><p>
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world&rsquo;s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we&rsquo;re keeping people around the world safe and secure.</p></div><div><h5 class="jobSectionHeader"><b>
ABOUT THE ROLE</b></h5><div><div>
Peraton is seeking a <b>Senior Cybersecurity Engineer (SME)</b> to support a federal customer&rsquo;s <b>Virtual Security Operations Center (vSOC)</b>.</div><div><br>
</div><div><b>Location: Washington, DC</b></div><div></div><div><br>
This individual will serve as the technical lead for SIEM operations, detection engineering, and advanced security analytics, leveraging Microsoft Sentinel and the Microsoft Defender security stack.</div><div></div><div><br>
The ideal candidate is a hands-on technical expert who can operate at both the engineering and operational levels, ensuring comprehensive monitoring, high-fidelity detection, and actionable intelligence across enterprise environments.</div><div>
This role directly supports mission-critical cybersecurity operations protecting sensitive federal data (CUI/PII/PHI/FTI) and aligns to Zero Trust and NIST-based security frameworks.</div><div></div><div><b><br>
What You&rsquo;ll Do</b></div><div><b>
Lead Microsoft Sentinel Operations</b></div><ul><li>
Serve as the primary SME for Microsoft Sentinel, the enterprise SIEM platform
</li><li>Design, implement, and optimize analytics rules, correlation logic, and data models
</li><li>Develop advanced KQL queries, workbooks, and dashboards to support SOC operations and reporting
</li><li>Ensure all monitoring and analytics align to the Microsoft Sentinel data model
</li></ul><div><b>Drive Detection Engineering &amp; Threat Analytics</b></div><ul><li>
Lead development and continuous tuning of MITRE ATT&amp;CK-aligned detection use cases
</li><li>Implement cross-domain correlation logic spanning identity, endpoint, network, and cloud telemetry
</li><li>Perform and guide proactive threat hunting activities
</li><li>Continuously improve detection capabilities based on:
</li><ul><li>Threat intelligence
</li><li>Incident response findings
</li><li>Red team and assessment results
</li></ul></ul><div><b>Integrate and Optimize Microsoft Security Stack</b></div><ul><li>
Leverage and optimize:
</li><ul><li>Microsoft Defender for Endpoint (MDE) for endpoint visibility
</li><li>Microsoft Defender for Identity (MDI) for Active Directory and identity monitoring
</li></ul><li>Ensure all Defender telemetry is:
</li><ul><li>Properly ingested into Sentinel
</li><li>Actively monitored and correlated
</li><li>Optimized for detection and response
</li></ul></ul><div><b>Engineer Multi-Source Log Ingestion &amp; Normalization</b></div><ul><li>
Lead ingestion and integration of non-Microsoft data sources, including:
</li><ul><li>AWS CloudTrail and VPC Flow Logs
</li><li>Proofpoint email security logs
</li><li>Veeam backup logs
</li><li>Checkpoint and Cisco network/security logs
</li><li>iBoss proxy logs
</li><li>VPN and remote access logs
</li></ul><li>Ensure all telemetry is:
</li><ul><li>Normalized to Sentinel schema</li><li>
Aligned for cross-plane correlation
</li><li>Optimized for detection engineering and threat hunting
</li></ul></ul><div><b>Ensure Data Integrity &amp; Pipeline Health</b></div><ul><li>
Oversee ingestion pipelines to ensure:
</li><ul><li>Log integrity and completeness</li><li>
Accurate timestamping and synchronization
</li><li>Proper schema mapping and field normalization
</li></ul><li>Monitor ingestion health to identify:
</li><ul><li>Dropped or malformed logs
</li><li>Latency or ingestion failures
</li></ul><li>Configure and manage log routing tools (e.g., Cribl), ensuring:
</li><ul><li>No data loss
</li><li>Preservation of original log fidelity
</li></ul></ul><div><b>Enable Cross-Plane Security Visibility</b></div><ul><li>
Implement and maintain end-to-end visibility across:
</li><ul><li>Identity
</li><li>Endpoint
</li><li>Network
</li><li>Cloud
</li></ul><li>Develop correlation strategies that:
</li><ul><li>Map to MITRE ATT&amp;CK techniques
</li><li>Support advanced threat detection
</li><li>Enable full attack path analysis
</li></ul></ul><div><b>Deliver Operational Reporting &amp; Dashboards</b></div><ul><li>
Build and maintain real-time dashboards and automated reporting within Sentinel
</li><li>Provide visibility into:
</li><ul><li>Detection performance (MTTD/MTTR)
</li><li>Log ingestion health
</li><li>Threat trends and risk posture
</li></ul><li>Support delivery of:
</li><ul><li>Operational SOC reporting
</li><li>Executive-level insights
</li><li>Compliance and audit artifacts
</li></ul></ul><div><b>Mentor and Lead Technical Teams</b></div><ul><li>
Serve as a technical escalation point and mentor for SOC analysts (Tier I&ndash;III)
</li><li>Provide guidance on:
</li><ul><li>Detection strategy
</li><li>Log onboarding
</li><li>Security architecture improvements
</li></ul><li>Collaborate with:
</li><ul><li>Incident Response teams
</li><li>Cloud and infrastructure teams</li><li>
Government stakeholders</li></ul></ul></div></div><div></div><div><h5 class="jobSectionHeader"><b><br>
QUALIFICATIONS</b></h5><div><div><b>
Required:</b></div><div></div><div><b><br>
Education &amp; Experience:
</b></div><ul><li>Bachelors degree and a minimum of 8 years of relevant experience. An additional 4 years of experience in lieu of degree.</li><li>
Minimum of 8 years of cybersecurity experience, including:<ul><li>
5+ years in SOC, SIEM, or detection engineering roles
</li><li>3+ years of hands-on experience with Microsoft Sentinel
</li></ul></li><li><b>Technical Skills</b><ul><li>
Deep expertise in:
<ul><li>Microsoft Sentinel (analytics, KQL, data models)
</li><li>Microsoft Defender for Endpoint (MDE)
</li><li>Microsoft Defender for Identity (MDI)
</li></ul></li><li>Strong experience with:
<ul><li>Log ingestion, normalization, and schema mapping
</li><li>Multi-source telemetry integration (cloud, network, endpoint)
</li><li>AWS logging (CloudTrail, VPC Flow Logs)
</li></ul></li><li>Knowledge of:
<ul><li>MITRE ATT&amp;CK framework
</li><li>SIEM/XDR integration
</li><li>Log routing tools (e.g., Cribl, Logstash, Fluentd)</li></ul></li></ul></li><li><b>
U.S citizenship required</b></li><li><b>
Ability to obtain Top Secret Clearance</b></li></ul><div></div><div><b><br>
Preferred:</b></div><ul><li>
Relevant certifications:
</li><ul><li>CISSP, GCIA, GCIH, CEH, or equivalent
</li><li>Microsoft Security certifications (Sentinel, Defender)
</li><li>AWS Security certifications
</li><li>Privacy certifications (e.g., CIPP/US, CIPM) where applicable
</li></ul><li>Experience supporting:
</li><ul><li>Federal civilian agencies
</li><li>NIST-based frameworks (800-53, 800-61, 800-92)
</li><li>Zero Trust architectures
</li></ul></ul><div><b>What Sets You Apart</b></div><ul><li>
Ability to operate as both a <b>hands-on engineer and strategic technical leader</b>
</li><li>Experience building <b>detection capabilities from the ground up</b>
</li><li>Strong understanding of <b>identity-centric security and Zero Trust principles</b>
</li><li>Proven ability to <b>optimize security operations for efficiency and cost</b></li></ul></div></div><div></div><div><h5 class="jobSectionHeader"><b><br>
DETAILS</b></h5><div><p>
<b>Target Salary Range:</b> $135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual&rsquo;s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
</p></div><div><p>
<b>Benefits Statement:</b> Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
</p></div><div><p>
<b>Application Statement:</b> The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.
</p></div><p><b>
EEO:</b> Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</p></div></div><div></div>

SENIOR CYBERSECURITY ENGINEER (SME)

CVS Health

<div><p>We&rsquo;re building a world of health around every individual &mdash; shaping a more connected, convenient and compassionate health experience. At CVS Health&reg;, you&rsquo;ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger &ndash; helping to simplify health care one person, one family and one community at a time.</p><p></p><p><b>
Position Summary</b></p><p></p><p>
The Principal Threat Adversary Operations Engineer &ndash; Red Team is a senior, highly technical individual contributor responsible for designing and executing advanced offensive security operations across complex enterprise, cloud, and hybrid environments. This role leads the development of custom attack techniques and novel adversary simulations, exploring fringe and emerging attack vectors beyond standard penetration testing methodologies. Penetration testing is a core function of the role, with a focus on uncovering high‑impact, previously unidentified security weaknesses across networks, applications, identities, and systems.</p><p></p><p>
Operating at a principal engineering level, the role builds and executes sophisticated attack campaigns using a combination of industry‑standard tooling and extensive custom exploit and tooling development. The Principal Engineer applies deep expertise in adversary tradecraft, scripting, and automation to emulate real‑world threat actors at scale, aligning attack scenarios with modern and emerging Tactics, Techniques, and Procedures (TTPs). Offensive activities are informed by current threat intelligence and adversary modeling to ensure realistic, intelligence‑driven simulations that meaningfully stress defensive controls.</p><p></p><p>
The role serves as a critical purple team partner and trusted advisor to detection, response, and incident investigation teams, translating complex offensive findings into measurable improvements in defensive capability, telemetry, and operational readiness. Through clear articulation of technical risk and business impact, the Principal Engineer influences enterprise security strategy, informs long‑term defensive investments, and supports high‑severity investigations and post‑incident analysis. All offensive activities are executed with strong governance awareness, ensuring alignment with regulatory, audit, and compliance expectations while advancing the organization&rsquo;s adversary‑informed security posture.</p><p></p><p>
Role Responsibilities:</p><p></p><p>
Penetration Testing &amp; Adversary Operations</p><ul><li>
Lead and execute advanced internal and external penetration tests across enterprise, cloud, and emerging technology environments.</li><li>
Design and execute custom adversary emulation campaigns to pressure‑test detection, response, and control effectiveness.</li><li>
Own and evolve the offensive security toolset, including development of custom exploits, scripts, and attack frameworks.</li><li>
Produce executive‑ready assessments that clearly articulate technical risk, business impact, and remediation priorities.</li></ul><p>
Purple Team &amp; Defensive Enablement</p><ul><li>
Partner closely with detection, response, and security engineering teams to drive purple team exercises and adversary‑informed improvements at scale.</li><li>
Translate offensive findings into measurable enhancements in monitoring, telemetry, alerting, and response workflows.</li><li>
Lead technical deep dives and knowledge‑sharing sessions to elevate enterprise understanding of adversary behavior and attack paths.</li></ul><p>
Security Strategy, Automation &amp; Incident Support</p><ul><li>
Influence enterprise adversary operations and threat management strategy through risk‑based assessments and adversary trend analysis.</li><li>
Architect and implement automation to scale penetration testing and adversary simulation capabilities.</li><li>
Provide expert adversary insight during incident response and threat hunting, informing hypotheses, detections, and post‑incident improvements.</li></ul><p></p><p><b>
Required Qualifications</b></p><ul><li>
10+ years of hands‑on experience in penetration testing, red teaming, adversary emulation, and/or offensive security.</li><li>
7+ years of deep experience with tools such as Kali Linux, Metasploit, Nmap, Burp Suite, and comparable frameworks.</li><li>
5+ years of advanced scripting experience (Python, PowerShell, Bash, or similar languages).</li><li>
5+ years of experience securing and testing cloud platforms (AWS, Azure, GCP) and containerized environments.</li></ul><p></p><p><b>
Preferred Qualifications</b></p><ul><li>
Advanced certifications such as OSCP, OSCE, CISSP, CEH, or GPEN.</li><li>
Demonstrated leadership in purple team programs and adversary simulation initiatives.</li><li>
Strong familiarity with PCI‑DSS, HIPAA, ISO 27001, and enterprise compliance environments.</li><li>
Expert knowledge of MITRE ATT&amp;CK, NIST, and CIS security frameworks.</li><li>
Exceptional communication skills with the ability to influence technical and non‑technical senior stakeholders.</li></ul><p></p><p><b>
Education</b></p><ul><li>
Bachelor&rsquo;s degree or equivalent experience (High School Diploma and 4 years relevant experience)</li></ul><p></p><p><b>
Pay Range</b></p><p>
The typical pay range for this role is:</p><p></p>
$144,200.00 - $288,400.00<p><br>
This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. This position also includes an award target in the company&rsquo;s equity award program.</p><p><br>
Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.</p><p></p><p><b>
Great benefits for great people</b></p><p></p><p>
We take pride in offering a comprehensive and competitive mix of pay and benefits that reflects our commitment to our colleagues and their families.</p><br>
This full‑time position is eligible for a comprehensive benefits package designed to support the physical, emotional, and financial well‑being of colleagues and their families. The benefits for this position include medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and other resources, based on eligibility.<p><br>
Additional details about available benefits are provided during the application process and on Benefits Moments.</p><br>
We anticipate the application window for this opening will close on: 05/11/2026<p></p><p>
Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.</p></div>

Principal Adversary Operations Engineer - Red Team

Explore 273+ Security engineer in Washington this May. Find roles across top companies and apply now to boost your career.