Information Security Engineer

Tepa LLC; Alexandria (VA); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Comprehensive medical, dental, and vis

Generous paid time off

401(k) with company match

Life insurance

Flexible spending & HSA

Mental health support

Disability coverage

Tuition reimbursement

Job summary

Tepa LLC is seeking an Information Security Engineer to protect information systems and assets across commercial and regulated environments, including CMMC Level 2 enclaves. You will support security operations through monitoring, incident response, vulnerability management, and security engineering.

The role requires 5+ years of cybersecurity experience, a Bachelor’s degree or equivalent, and hands-on threat response. Onsite location in Alexandria, VA. Competitive salary and benefits.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent experience.
• 5+ years of experience in cybersecurity, information security, systems engineering, or related roles.
• Hands-on experience investigating and responding to cybersecurity alerts and incidents.
• Experience administering or supporting enterprise security technologies such as EDR, SIEM, vulnerability management, identity security, firewalls, email security, or cloud security platforms.
• Experience supporting vulnerability identification, remediation, and security hardening.
• Experience creating and maintaining technical documentation, including procedures, standards, diagrams, and incident records.

Responsibilities

• Handle day-to-day security monitoring and incident response, including alert triage, investigation, containment, remediation, and documentation.
• Investigate security events using endpoint, identity, network, cloud, SIEM, and other telemetry.
• Coordinate with internal IT teams and third-party providers during investigations and remediation.
• Identify root causes after incidents and recommend improvements to reduce recurrence.
• Implement, configure, administer, and maintain security platforms for endpoint, identity, cloud, network, and vulnerability management.
• Perform vulnerability management activities including remediation coordination and verification.
• Support security hardening using CIS Benchmarks, STIGs, and vendor guidance.
• Support security engineering initiatives involving Microsoft 365, Azure, and related enterprise tech.
• Develop and maintain security processes, standards, procedures, diagrams, and technical documentation.
• Maintain documentation for commercial environments and enclave security controls and procedures.
• Support requirements tied to CMMC, NIST SP 800-171, and related frameworks.
• Collect and maintain evidence for assessments, audits, and control validation.
• Collaborate with Infrastructure, Cloud, End User Services, GRC, and other stakeholders to embed security requirements.
• Assist with testing and validation of controls and opportunities for automation and maturity.
• Participate in incident response exercises, security assessments, and continuous improvement.
• Communicate findings and remediation needs to technical and non-technical audiences.
• Be available for occasional off-hours work to support cybersecurity incidents.

Skills

Incident response

Security monitoring

Vulnerability management

Endpoint security

Identity security

Documentation

Communication

Collaboration

Education

Bachelor’s degree or equivalent

Tools

EDR

SIEM

Firewalls

Email security

Cloud security platforms

Job description

Tepa LLC is seeking an Information Security Engineer to help protect Tepa’s information systems and digital assets across commercial and regulated environments, including CMMC Level 2 enclaves. In this role, you will support security operations through monitoring, incident response, vulnerability management, and security engineering, helping drive investigation, containment, remediation, and follow-up.

Location and role details

• Location: Alexandria, VA (onsite)
• Salary: USD 110,000 to 150,000 per year
• Minimum experience: 5+ years

Responsibilities

• Handle day-to-day security monitoring and incident response, including alert triage, investigation, containment, remediation, recovery, and documentation.
• Investigate security events and incidents using endpoint, identity, network, cloud, SIEM, and other security telemetry.
• Coordinate with internal IT teams and third-party security providers during incident investigation and remediation.
• Identify root causes and contributing factors after incidents and recommend technical or procedural improvements to reduce recurrence.
• Implement, configure, administer, and maintain security platforms and controls for endpoint, identity, cloud, network, vulnerability management, and security monitoring.
• Perform vulnerability management activities including review, validation, prioritization, remediation coordination, exception tracking, and verification of completed remediation.
• Support security hardening and configuration management using security baselines and guidance such as CIS Benchmarks, STIGs, and vendor recommendations.
• Support security engineering initiatives involving Microsoft 365, Azure, endpoint security, identity and access management, network security, and related enterprise technologies.
• Develop and maintain security processes, standards, procedures, work instructions, diagrams, and other technical documentation.
• Maintain documentation for Tepa’s commercial environment and CMMC Level 2 enclave, including security controls, operational procedures, incident response activities, and technical standards.
• Support security requirements tied to CMMC, NIST SP 800-171, and other applicable compliance frameworks.
• Collect and maintain technical evidence for assessments, audits, control validation, and compliance activities.
• Collaborate with Infrastructure, Cloud, End User Services, GRC, and other stakeholders to incorporate security requirements into operational processes and technical solutions.
• Assist with testing and validation of security controls, identifying opportunities to improve effectiveness, automation, and operational maturity.
• Participate in incident response exercises, security assessments, and continuous improvement efforts.
• Communicate security findings, risks, remediation needs, and technical recommendations to technical and non-technical stakeholders.
• Be available for occasional off-hours work as required to support cybersecurity incidents, maintenance, or other critical security activities.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related technical field, or an equivalent combination of education, training, and relevant professional experience.
• 5+ years of experience in cybersecurity, information security, systems engineering, infrastructure security, or a related role.
• Hands-on experience investigating and responding to cybersecurity alerts and incidents.
• Experience administering or supporting enterprise security technologies such as EDR, SIEM, vulnerability management, identity security, firewalls, email security, or cloud security platforms.
• Experience supporting vulnerability identification, remediation, and security hardening.
• Experience creating and maintaining technical documentation, including procedures, standards, work instructions, diagrams, incident records, and security configuration documentation.
• Working knowledge of enterprise technologies including endpoints, servers, networking, identity, cloud services, and enterprise applications.
• Working knowledge of cybersecurity and compliance frameworks such as CMMC, NIST SP 800-171, NIST CSF, CIS Controls, or similar frameworks.
• Strong knowledge of incident response, security monitoring, vulnerability management, endpoint security, identity security, and enterprise security operations.
• Technical troubleshooting and analytical skills to independently investigate security events and determine appropriate remediation actions.
• Working knowledge of cloud, endpoint, network, identity, and application security concepts.
• Ability to implement and maintain security controls based on established architecture, standards, and organizational requirements.
• Ability to translate technical security requirements into repeatable processes, standards, procedures, and work instructions.
• Strong documentation skills with focus on accuracy, completeness, and auditability.
• Ability to balance security requirements with operational and business needs and appropriately escalated risks or exceptions.
• Strong written and oral communication skills for technical and non-technical audiences.
• Collaboration skills across Security, Infrastructure, Cloud, End User Services, GRC, and business teams.
• Ability to prioritize multiple responsibilities across operational work, incident response, engineering, and documentation.

Technologies

• Microsoft 365
• Azure
• Endpoint detection and response (EDR)
• SIEM
• Vulnerability management
• Identity security
• Firewalls
• Email security
• Cloud security platforms
• CIS Benchmarks
• STIGs
• CMMC
• NIST SP 800-171
• NIST Cybersecurity Framework
• CIS Controls
• PowerShell
• Python
• APIs
• Microsoft Defender
• Microsoft Sentinel
• Entra ID
• Intune
• CrowdStrike
• Microsoft Government Community Cloud High (GCC High)
• GCIH
• Security+
• CySA+
• CISSP
• Azure Security Engineer Associate

Benefits

• Comprehensive medical, dental, and vision coverage
• Generous paid time off and holidays
• 401(k) plan with company match
• Life insurance
• Flexible spending and health savings account
• Mental health support and resources
• Short and long-term disability
• Tuition reimbursement

Preferred experience (not required)

• Experience securing Microsoft Azure and Microsoft 365 environments.
• Experience working within regulated or controlled environments supporting CMMC, NIST SP 800-171, or similar requirements.
• Experience with Microsoft Government Community Cloud High (GCC High) environments.
• Experience with Microsoft Defender, Microsoft Sentinel, Entra ID, Intune, CrowdStrike, or comparable security platforms.
• Experience with security automation, scripting, or workflow improvement using PowerShell, Python, APIs, or similar technologies.
• Experience performing or supporting incident response exercises, tabletop exercises, security assessments, or audit activities.
• Experience implementing CIS Benchmarks, DISA STIGs, or similar system-hardening standards.
• GCIH, Security+, CySA+, CISSP, or similar security certifications.
• Microsoft security certifications such as Azure Security Engineer Associate or other relevant Microsoft security credentials.
• Other relevant incident response, cloud security, or cybersecurity engineering certifications.