Security Engineer (Cross-Functional) - SME

We are seeking a Security Engineer to protect enterprise applications, cloud platforms, networks, and supporting infrastructure. This role combines application security testing, threat monitoring, incident response planning, cyber resiliency, and secure cloud operations.

The engineer identifies vulnerabilities, implements monitoring and alerting capabilities, and safeguards critical data and Internet communications. The position also manages communications security resources, supports compliance activities, and collaborates with industry partners to advise government stakeholders on security risks and recommended improvements.

• →

  Secure multiple applications and platforms, identifying critical data, vulnerabilities, and potential exposure points.

• →

  Develop and maintain incident response and recovery plans to support cyber resiliency and operational continuity.

• →

  Perform web application and platform security testing, document findings, and recommend corrective actions.

• →

  Design and implement monitoring and alerting capabilities to detect anomalous activity across applications and infrastructure.

• →

  Monitor and correlate security data from multiple systems to support threat detection, investigation, remediation, and continuous improvement.

• →

  Coordinate with industry partners to advise government stakeholders on vulnerabilities and security recommendations.

• →

  Install, operate, maintain, and upgrade secure cloud computing environments, platforms, software, and core infrastructure.

• →

  Build and improve cloud networks and cloud-based systems in accordance with defense-in-depth security policies and governance guidelines.

• →

  Manage communications security (COMSEC) resources consistent with CNSSI 4009 terminology, or serve as a key custodian for a cryptographic key management system (CKMS).

• →

  Protect organizational websites, Internet transactions, confidential order information, and external business-to-business connections.

• →

  Implement and maintain firewall and encryption technologies to protect organizational and customer information.

• →

  Administer user accounts and access permissions, including account updates and deletions.

• →

  Monitor compliance violations, investigate findings, and follow up on corrective actions.

• →

  Develop and maintain security policies, practices, procedures, and guidelines.

• Minimum of 10 years of relevant experience in security engineering, cybersecurity, application security, cloud security, or related technical disciplines.

• Experience securing multiple applications and identifying critical data and vulnerability points.

• Ability to develop incident response and recovery plans.

• Knowledge of cyber resiliency, security planning, and web application and platform security testing.

• Experience designing security monitoring and alerting capabilities and investigating anomalous activity.

• Ability to correlate security data to detect threats, guide remediation, and recommend system improvements.

• Experience operating, maintaining, upgrading, and securing cloud infrastructure, platforms, networks, and software.

• Understanding of defense-in-depth principles and security governance requirements.

• Experience managing COMSEC resources or performing cryptographic key custodial duties.

• Knowledge of firewall technologies, encryption, website security, and secure Internet communications.

• Experience administering user access, addressing compliance violations, and developing security policies and procedures.

• Strong analytical, troubleshooting, and communication skills.

• Ability to explain security findings and recommendations to government stakeholders and industry partners.