Job Description
Systems Security Engineer
Location: Onsite – 5 Days per Week
Clearance: Top Secret Required
About the Role
We are seeking a Systems Security Engineer to lead incident response, security monitoring, and compliance efforts for a federal agency. This role requires a seasoned cybersecurity professional with a deep understanding of the full security incident response and management lifecycle . The ideal candidate will support systems engineers in hardening infrastructure , ensure compliance with federal security standards, and proactively assess the organization’s security posture across cloud and on-premises environments.
Key Responsibilities
Security Hardening & Compliance
- Support systems engineers in securing deployments, from virtual machine configurations to application-level security controls .
- Ensure continuous compliance with federal and agency security standards for patches, software upgrades, and system configurations .
- Deploy security controls to Windows operating systems in a secure environment .
Incident Response & Threat Monitoring
- Monitor network, application, database, and system security using Splunk Enterprise Security and other security tools.
- Develop incident response plans and collaborate with DevSecOps engineers and developers to conduct penetration testing of high-value systems .
- Spearhead incident response actions , including technical remediation and customer communication .
Security Posture & Risk Management
- Assess the security posture for applications and services across on-premises and cloud networks .
- Provide recommendations for improving security architecture, monitoring, and compliance .
- Address Plan of Action & Milestones (POA&Ms) with a structured end-to-end resolution approach .
Operations & Maintenance
- Perform scheduled maintenance and support after-hours release deployments as needed.
- Lead the team in managing the organization’s overall security framework and risk mitigation strategies.
Required Qualifications
- Minimum four years of specialized experience supporting 24/7 enterprise-class applications in a significant cybersecurity role.
- Demonstrated experience in developing and implementing end-to-end incident response plans .
- Deep knowledge of cybersecurity with practical experience addressing POA&Ms from start to finish .
- Ability to operate as the sole systems security engineer within a DevSecOps division , working closely with developers and systems engineers.
- Hands-on experience deploying security controls to Windows operating systems.
- Experience using Splunk Enterprise Security for proactive monitoring and incident response .
- Strong troubleshooting and problem-solving skills , with the ability to analyze security issues, evaluate alternatives, and implement logical solutions.
- Proven ability to manage multiple priorities effectively and meet deadlines .
- A bachelor’s degree in computer science, network security, or a related field and at least four years of experience in a security engineering role OR at least six years of experience in a security engineering role .
Preferred Skills
- GIAC Certified Incident Handler (GCIH), CISSP, CEH, CASP+, Security+ , or equivalent certifications.
- Experience working in a security-engineering role at a federal agency , including familiarity with iPost .
- A master’s degree in computer science, network security, or a related field.
- Hands-on experience performing penetration testing and security assessments.
Job Tags
Full time, Remote job,