Cyber Security Engineer

Sealing Technologies, a Parsons Company; Maryland; On-site; USD 120,000 - 160,000; Full time

Job summary

Sealing Technologies, a Parsons Company, is seeking a Cybersecurity Engineer to support a strategic DoD program. The role leads vulnerability management, tunes detection capabilities, performs incident triage, and applies hardening across the program.

You will protect mission critical DoD systems, develop automation scripts, and mentor junior engineers while contributing to RMF/ATO sustainment and security assessments.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field; equivalent experience may be considered.
• 5+ years of operational cybersecurity/security engineering experience supporting DoD or federal programs.
• Experience with SIEM platforms (Splunk, Elastic, Zeek, or equivalent), including rule and alert development.
• Experience with vulnerability assessment tools (Nessus, Tenable, ACAS, or equivalent).
• Experience with STIG implementation and security baseline enforcement across Windows and Linux.
• Experience with incident triage, log analysis, and packet capture analysis.
• Experience with scripting (Python, Bash, PowerShell) for security automation.
• Familiarity with MITRE ATT&CK and common threat intelligence frameworks.
• DoD 8570 IAT Level II certification (Security+ CE or equivalent), or ability to obtain within 6 months of hire.

Responsibilities

• Lead vulnerability management activities across the program platform, including scan scheduling, remediation tracking, and risk reporting.
• Develop and tune SIEM rules, alerts, and correlation logic across program environments to improve detection fidelity.
• Conduct incident triage and initial response across program systems; document findings, perform root cause analysis, and escalate appropriately.
• Apply and maintain STIGs, security baselines, and hardening configurations across program Windows, Linux, and network platforms.
• Conduct vulnerability assessments using Nessus, Tenable, ACAS, or equivalent tooling; track remediation across hardware and software components.
• Analyze network traffic, packet captures, and log data across diverse program environments to identify anomalies and potential threats.
• Work directly with DCO tools and defensive sensor platforms; support kit configuration, deployment, and tuning.
• Support RMF authorization workflows and contribute to security assessment documentation and ATO sustainment for the program.
• Develop scripts (Python, Bash, PowerShell) to automate security operations workflows across the program environment.
• Mentor junior security engineers on operational procedures, detection engineering, and incident handling.
• Provide technical input to program proposal sections as needed.

Skills

SIEM tuning

Incident response

Vulnerability management

Threat detection

Scripting

Education

Bachelor's degree in Cybersecurity or related field

Tools

Splunk

Elastic

Nessus

ACAS

PowerShell

Python

Job description

Sealing Technologies, a Parsons Corporation company, is a trusted partner in providing powerful edge computing hardware and defensive cybersecurity solutions to protect the Federal Government and private enterprises. Our goal is to support the federal government, our allies, mission partners, and private industries in accomplishing their cybersecurity and defense objectives efficiently and securely through cutting-edge hardware, engineering, and integration services.

Position Overview:

Sealing Technologies, a Parsons Company, is looking to hire a Cybersecurity Engineer to support a strategic DoD program. In this role, you will lead vulnerability management, tune detection capabilities, conduct incident triage, and apply hardening across the program. Moreover, you will be responsible for protecting mission critical DoD systems from evolving threats and supporting the operational defense of fielded kits.

Duties and Responsibilities:

• Lead vulnerability management activities across the program platform, including scan scheduling, remediation tracking, and risk reporting.
• Develop and tune SIEM rules, alerts, and correlation logic across program environments to improve detection fidelity.
• Conduct incident triage and initial response across program systems; document findings, perform root cause analysis, and escalat e appropriately.
• Apply and maintain STIGs, security baselines, and hardening configurations across program Windows, Linux, and network platforms.
• Conduct vulnerability assessments using Nessus, Tenable, ACAS, or equivalent tooling; track remediation across hardware and software components.
• Analyze network traffic, packet captures, and log data across diverse program operational environments to identify anomalies and potential threats.
• Work directly with DCO tools and defensive sensor platforms relevant to the program mission; support kit configuration, deployment, and tuning.
• Support RMF authorization workflows and contribute to security assessment documentation and ATO sustainment for the program.
• Develop scripts (Python, Bash, PowerShell) to automate security operations workflows across the program environment.
• Mentor junior security engineers on operational procedures, detection engineering, and incident handling.
• Provide technical input to program proposal sections as needed.

Minimum Qualifications:

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field; equivalent experience may be considered.
• 5+ years of operational cybersecurity / security engineering experience supporting DoD or federal programs.
• Experience with SIEM platforms (Splunk, Elastic, Zeek, or equivalent), including rule and alert development.
• Experience with vulnerability assessment tools (Nessus, Tenable, ACAS, or equivalent).
• Experience with STIG implementation and security baseline enforcement across Windows and Linux.
• Experience with incident triage, log analysis, and packet capture analysis.
• Experience with scripting (Python, Bash, PowerShell) for security automation.
• Familiarity with MITRE ATT&CK and common threat intelligence frameworks.
• DoD 8570 IAT Level II certification (Security+ CE or equivalent), or ability to obtain within 6 months of hire.

Preferred Qualifications:

• Active Secret clearance or ability to obtain one.
• Experience supporting DoD Defensive Cyberspace Operations (DCO) programs.
• Experience or firm understanding of DCO tooling and defensive sensor platforms.
• Experience with endpoint detection and response (EDR), firewall, and IDS/IPS platforms.
• Experience or firm understanding of the Risk Management Framework (RMF), NIST 800-53, NIST 800-171, or CMMC.
• Experience with network security monitoring (NSM) and full packet capture (FPCAP).
• Industry certifications such as GCIA, GCIH, CySA+, or equivalent.
• Experience supporting business development and proposal efforts.