Senior Security Engineer

What you'll do

• Lead and coordinate day-to-day security operations while establishing priorities and tracking activities across the security team.
• Manage the full vulnerability management lifecycle, including identification, analysis, prioritization, remediation, validation, and documentation.
• Perform vulnerability scanning and analysis using tools such as ACAS or Tenable/Nessus.
• Oversee the implementation and validation of DISA STIGs and approved security configuration baselines across infrastructure systems.
• Support RMF/ATO activities by managing security documentation, control evidence, and compliance with NIST SP 800-53 standards.
• Monitor security logs and events using Splunk or similar SIEM technologies to ensure issues are addressed.
• Provide technical oversight for isolated or restricted environments, including patching, hardening, and continuous monitoring.
• Develop and maintain repeatable security processes for vulnerability management, compliance monitoring, and evidence collection.

What we're looking for

• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent work experience.
• At least 8 years of relevant experience (additional years may be considered in lieu of a degree).
• Active TS/SCI clearance with Polygraph required, or active TS/SCI with willingness to obtain a Poly.
• U.S. Citizenship is required.
• Must meet DoD 8570.11-IAT Level II certification requirements (e.g., Security+ CE, CCNA-Security, GSEC, or SSCP).
• Experience with Windows Server, Active Directory, IIS, DNS, DHCP, Exchange, and DFS.
• Experience implementing security controls, STIGs, and tools such as Splunk, McAfee HBSS, and ACAS.
• Experience managing and/or supervising a team of technical professionals (preferred); CISP or CASP certification (preferred).