Cybersecurity Engineer Sr Principal

Description

The company supports federal cyber missions and operations, and this role is on a classified commercial cloud environment for a customer.

You would help engineer and run security controls for a classified secure workstation enclave, covering continuous monitoring and compliance for mission-critical systems.

Technologists here can pursue several growth paths in cyber work across the federal government.

Responsibilities

• Support and lead the configuration, hardening and updating of Linux operating systems to keep the enclave secure.
• Work with enclave engineers, system administrators and vendors to run core security applications: SIEM, vulnerability scanning, endpoint protection and insider threat tools.
• Validate telemetry, triage alerts and investigate incidents as part of continuous monitoring and incident response.
• Support RMF-aligned vulnerability management, endpoint security and auditing.
• Use Red Hat/Linux, Splunk, Tenable, Trellix, Teramind and Microsoft Active Directory with Group Policy to build and check security controls and report on the enclave's posture.
• Administer and monitor Splunk SIEM, Tenable, Trellix and Teramind so telemetry, policies and integrations work as intended.
• Triage and investigate security alerts and incidents under the Incident Response Plan.
• Oversee vulnerability and STIG scanning, including host inventory, scan policies and results, and coordinate fixes with the engineering team.
• Make sure endpoint visibility and policy enforcement reach every host and the insider threat tooling.
• Help with RMF continuous monitoring work.
• Write security documentation, control implementation statements, assessment artifacts and POA&M mitigation activities.

Requirements

• Bachelor of Arts or Bachelor of Science degree.
• 10+ years of related experience.
• Hands-on work with Red Hat and other Linux distributions.
• Hands-on engineering experience running security operations with Splunk SIEM, Tenable vulnerability management and Trellix endpoint security.
• Hands-on experience with Teramind for insider threat monitoring.
• Understanding of Microsoft Active Directory and of applying controls through Group Policy.
• Knowledge of the NIST SP 800 series, especially 800-37, 800-53 and 800-30, and of risk management principles.
• Active Top Secret security clearance.
• DoD 8140 / 8570.01-M compliance is required.
• No certifications are required.
• US citizenship is required.

Conditions

Onsite in McLean, VA.

Scheduled for 40 hours per week.

Travel of 10-25% is required.

Regular position in the Cyber and IT Risk Management job family.

You must currently hold Top Secret/SCI clearance or be able to obtain it. No Public Trust or other clearance is required.

The hiring process includes an identity verification step using biometrics and AI, and interviews are held on camera. By proceeding, you authorize collection and use of your biometric data for verification and security purposes.

Equal opportunity employer, including individuals with disabilities and protected veterans.

Benefits

• The likely salary range is $170,000 - $230,000. This is not a guarantee: pay is set by experience, geographic location and possibly contract terms, and may fall outside this range.
• Medical plan options, some with Health Savings Accounts, plus dental and vision plans.
• 401(k) with pre-tax and post-tax contributions up to IRS limits, and a company match.
• Flexible scheduling through full-flex weeks where possible, plus paid vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
• Short and long-term disability, life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance, provided or available.
• An AI-powered career tool that suggests career steps and learning, and an internal mobility team to help with career goals.