DoD Cybersecurity Engineer — Threat Detection & Incident Response

Sealing Technologies, Inc.; Columbia (MD); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Retirement contributions

Tuition reimbursement

Flexible schedules

Generous vacation policies

Snacks and monthly lunches

Company retreats and gatherings

Flexible work arrangements

Pet friendly offices

Quarterly merit bonuses

Job summary

Sealing Technologies, a Parsons Corporation company, is seeking a Cybersecurity Engineer to support a strategic DoD program. You will lead vulnerability management, tune detection capabilities, conduct incident triage, and apply hardening across the program.

You will protect mission critical DoD systems from evolving threats. You will develop scripts to automate security operations, mentor junior engineers, and support RMF authorization efforts while collaborating with DCO tools and sensors

Qualifications

• U.S. Citizenship.
• Bachelor's degree in a related field or equivalent experience.
• 5+ years of operational cybersecurity / security engineering experience supporting DoD or federal programs.
• Experience with SIEM platforms, including rule and alert development.
• Experience with vulnerability assessment tools (Nessus, Tenable, ACAS, or equivalent).
• Experience with STIG implementation and security baseline enforcement across Windows and Linux.
• Experience with incident triage, log analysis, and packet capture analysis.
• Experience with scripting for security automation (Python, Bash, PowerShell).
• Familiarity with MITRE ATT&CK and threat intelligence frameworks.
• DoD 8570 IAT Level II certification or ability to obtain within 6 months.

Responsibilities

• Lead vulnerability management activities across the program platform, including scan scheduling, remediation tracking, and risk reporting.
• Develop and tune SIEM rules, alerts, and correlation logic across program environments to improve detection fidelity.
• Conduct incident triage and initial response across program systems; document findings, perform root cause analysis, and elevate appropriately.
• Apply and maintain STIGs, security baselines, and hardening configurations across program Windows, Linux, and network platforms.
• Conduct vulnerability assessments using Nessus, Tenable, ACAS, or equivalent tooling; track remediation across hardware and software components.
• Analyze network traffic, packet captures, and log data across diverse program operational environments to identify anomalies and potential threats.
• Work directly with DCO tools and defensive sensor platforms relevant to the program mission; support kit configuration, deployment, and tuning.
• Support RMF authorization workflows and contribute to security assessment documentation and ATO sustainment for the program.
• Develop scripts (Python, Bash, PowerShell) to automate security operations workflows across the program environment.
• Mentor junior security engineers on operational procedures, detection engineering, and incident handling.
• Provide technical input to program proposal sections as needed.

Skills

Vulnerability management

SIEM rule development

Incident triage

STIGs & baselines

Scripting (Python, PowerShell, Bash)

Familiarity with MITRE ATT&CK

DoD/federal program experience

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field

Tools

Splunk

Elastic

Nessus

ACAS

Job description

Sealing Technologies, a Parsons Corporation company, is seeking a Cybersecurity Engineer to support a strategic DoD program. You will lead vulnerability management, tune detection capabilities, conduct incident triage, and apply hardening across the program.

You will protect mission critical DoD systems from evolving threats. You will develop scripts to automate security operations, mentor junior engineers, and support RMF authorization efforts while collaborating with DCO tools and sensors