AttackIQ Engineer

FRC; Vienna, Erie (VA, Erie County); On-site; USD 80,000 - 150,000; Full time

Job summary

FRC is seeking an AttackIQ Engineer to implement, integrate, and administer the AttackIQ security validation platform within a large enterprise. You will collaborate with cybersecurity, infrastructure, and operations teams to execute validation activities and improve controls and detections.

The role focuses on configuring, deploying, and maintaining AttackIQ, applying MITRE ATT&CK, and producing actionable documentation for customer personnel.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field or equivalent professional experience.

Responsibilities

• Install, configure, integrate, and maintain the AttackIQ platform and associated components.
• Configure and execute security validation assessments using AttackIQ.
• Apply the MITRE ATT&CK framework and adversary tactics, techniques, and procedures (TTPs) to validation activities.
• Analyze validation results and help identify gaps and opportunities to improve security controls and detection capabilities.
• Integrate AttackIQ with applicable enterprise security technologies and workflows.
• Troubleshoot platform, network, endpoint, authentication, and integration issues.
• Work with security operations, network security, endpoint security, vulnerability management, and other technical teams.
• Develop technical documentation and provide training and knowledge transfer to customer personnel.

Skills

Cybersecurity engineering

Security operations

Network security

Troubleshooting

Communication

Documentation

Problem solving

Security testing / validation

Adversary emulation

Education

Bachelor’s degree in Computer Science / Cybersecurity / IT / Engineering

Tools

Firewalls

EDR

SIEM

IDS/IPS

Vulnerability management

VPNs

Security proxies

AttackIQ

Python

PowerShell

Bash

REST APIs

Job description

Job Details: Job Location: Vienna, VA 22182, Position Type: Full Time, Salary Range: $80,000.00 - $150,000.00 Salary/year, Travel Percentage: Up to 25%, Job Summary

The AttackIQ Engineer supports the implementation, integration, and ongoing administration of the AttackIQ security validation platform within an enterprise environment. This role collaborates with cybersecurity, infrastructure, and operations teams to execute security validation activities, troubleshoot technical issues, assess security control effectiveness, and recommend improvements to strengthen the organization's security posture.

Primary Responsibilities

• Install, configure, integrate, and maintain the AttackIQ platform and associated components
• Configure and execute security validation assessments using AttackIQ
• Apply the MITRE ATT&CK framework and adversary tactics, techniques, and procedures (TTPs) to validation activities
• Analyze validation results and help identity gaps and opportunities to improve security controls and detection capabilities
• Integrate AttackIQ with applicable enterprise security technologies and workflows
• Troubleshoot platform, network, endpoint, authentication, and integration issues
• Work with security operations, network security, endpoint security, vulnerability management, and other technical teams
• Develop technical documentation and provide training and knowledge transfer to customer personnel

Qualifications: Required Knowledge, Skills, and Abilities

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field OR equivalent professional experience
• 3-5 years of experience in cybersecurity engineering, security operations, security consulting, network security, systems engineering, or a related role
• Experience deploying or managing enterprise cybersecurity technologies such as firewalls, EDR, SIEM, vulnerability managements, IDS/IPS, VPNs, or security proxies
• Working knowledge of enterprise networking, including TCP/IP, routing, switching, DNS, firewalls, and network segmentation
• Familiarity with security testing, security control validation, detection engineering, SOC/blue-team operations, or similar functions
• Understanding of the MITRE ATT&CK framework and common adversary TTPs
• Strong troubleshooting, problem solving, communication, and documentation skills

Preferred Knowledge, Skills, and Abilities

• Hands on experience with AttackIQ
• Experience with breach and attack simulations (BAS), automated security validation, adversary emulation, or penetration testing technologies
• Experience with scripting or automation using Python, PowerShell, Bash, or REST APIs
• Experience supporting government, defense, or other highly regulated environments
• Relevant cybersecurity certifications such as Security+, CySA+, CISSP, or GIAC

Additional Requirements

• Must meet applicable customer security, access, background investigation, and credentialing requirements
• Employment for this position is contingent upon contract award and/or executive, funding, and satisfaction of applicable customer access and security requirements

Physical Requirements

• Prolonged periods of sitting at a desk and working on a computer
• Must be able to lift 15 pounds at times