Information Security Engineer

Tepa-Companies; Alexandria (VA); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision

401(k) with company match

Paid time off and holidays

Life insurance

Flexible spending and health savings

Mental health support

Disability (short/long-term)

Tuition reimbursement

Job summary

The Tepa Companies seek an Information Security Engineer to protect Tepa’s information systems and digital assets through security operations, incident response, vulnerability management, and security engineering. You will analyze events, coordinate with IT teams, and implement hardened security controls across on-premises and cloud environments.

Responsibilities include monitoring, investigations, documentation, and collaboration with multiple stakeholders to improve security posture and

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS or related field, or equivalent experience.
• 5+ years of experience in cybersecurity or information security roles.
• Experience administering or supporting enterprise security technologies (EDR, SIEM, vulnerability management, identity security, firewalls, cloud security).
• Strong incident response, monitoring, vulnerability management, and governance capabilities.

Responsibilities

• Perform day-to-day security monitoring and incident response, including alert triage, investigation, containment, remediation, and documentation.
• Investigate security events using endpoint, identity, network, cloud telemetry and SIEM.
• Coordinate with IT teams and third-party providers during incidents.
• Identify root causes and propose improvements to prevent recurrence.
• Maintain security controls across endpoint, identity, cloud, and network environments.
• Support security hardening and baseline configuration aligning with CIS Benchmarks and STIGs.
• Develop and maintain security documentation and procedures.

Skills

Incident response

Security monitoring

Vulnerability management

Cloud security

Identity and access management

Endpoint security

Security architecture

Documentation

Communication

PowerShell/Python

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

EDR

SIEM

Firewalls

Office 365/Azure security tools

Microsoft Defender

Microsoft Sentinel

Entra ID/Intune

CrowdStrike

Job description

ABOUT THE TEPA COMPANIESEstablished in 2005 and owned by the Paskenta Band of Nomlaki Indians, The Tepa Companies deliver comprehensive and sustainable solutions to federal, state, local, and private-sector clients throughout the United States. The tribally owned companies work independently and collaboratively to provide wide-ranging construction, engineering, environmental, industrial, staffing, and technology services.When you join Tepa Companies, you have the opportunity to expand your entrepreneurial skill set while growing professionally alongside the best in the industry. You will have the opportunity to impact your team, the organization as a whole, and subsequently, our Tribe.We seek out top talent to provide the best services for our clients. We focus on being a responsible company for our employees and their families by creating a culture that reflects our core values and offering competitive pay and benefits package. Our benefits package includes comprehensive medical, dental, vision, generous paid time off and holidays, 401(k) plan with company match, life insurance, flexible spending and health savings account, mental health support and resources, short and long-term disability, and tuition reimbursement.ABOUT THE JOBThe Tepa Companies are seeking an Information Security Engineer to support the protection of Tepa’s information systems and digital assets through security operations, incident response, vulnerability management, and security engineering activities. This role serves as a technical responder for cybersecurity incidents and performs investigation, containment, remediation, and follow-up activities across Tepa’s Commercial and regulated environments.Job Functions:Performs day-to-day security monitoring and incident response activities, including alert triage, investigation, containment, remediation, recovery, and documentation.Investigates security events and incidents using available endpoint, identity, network, cloud, SIEM, and other security telemetry.Coordinates with internal IT teams and third-party security providers during investigation and remediation of cybersecurity incidents.Identifies root causes and contributing factors following security incidents and recommends technical or procedural improvements to reduce recurrence.Implements, configures, administers, and maintains security platforms and controls supporting endpoint, identity, cloud, network, vulnerability management, and security monitoring.Performs vulnerability management activities, including vulnerability review, validation, prioritization, remediation coordination, exception tracking, and verification of completed remediation.Assists with security hardening and configuration management using established security baselines and guidance, including CIS Benchmarks, STIGs, and vendor security recommendations.Supports security engineering initiatives involving Microsoft 365, Azure, endpoint security, identity and access management, network security, and related enterprise technologies.Develops and maintains security processes, standards, procedures, work instructions, diagrams, and other technical documentation.Maintains documentation supporting Tepa’s Commercial environment and CMMC Level 2 enclave, including security controls, operational procedures, incident response activities, and technical standards.Supports implementation and ongoing operation of security requirements associated with CMMC, NIST SP 800-171, and other applicable security and compliance frameworks.Collects and maintains technical evidence supporting security assessments, audits, control validation, and compliance activities.Collaborates with Infrastructure, Cloud, End User Services, GRC, and other business stakeholders to incorporate security requirements into operational processes and technical solutions.Assists with testing and validation of security controls and identifies opportunities to improve security effectiveness, automation, and operational maturity.Participates in incident response exercises, security assessments, and continuous improvement activities.Communicates security findings, risks, remediation requirements, and technical recommendations to both technical and non-technical stakeholders.Available for occasional off-hours work as required to support cybersecurity incidents, maintenance, or other critical security activities.WHAT WE’RE LOOKING FORBachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related technical field, or equivalent combination of education, training, and relevant professional experience.5+ years of experience in cybersecurity, information security, systems engineering, infrastructure security, or a related technical role.Hands-on experience investigating and responding to cybersecurity alerts and incidents.Experience administering or supporting enterprise security technologies such as endpoint detection and response (EDR), SIEM, vulnerability management, identity security, firewalls, email security, or cloud security platforms.Experience supporting vulnerability identification, remediation, and security hardening activities.Experience creating and maintaining technical documentation, including procedures, standards, work instructions, diagrams, incident records, and security configuration documentation.Working knowledge of enterprise technologies including endpoints, servers, networking, identity, cloud services, and enterprise applications.Working knowledge of cybersecurity and compliance frameworks such as CMMC, NIST SP 800-171, NIST Cybersecurity Framework, CIS Controls, or similar frameworks.Strong working knowledge of incident response, security monitoring, vulnerability management, endpoint security, identity security, and enterprise security operations.Strong technical troubleshooting and analytical skills with the ability to independently investigate security events and determine appropriate remediation actions.Working knowledge of cloud, endpoint, network, identity, and application security concepts.Ability to implement and maintain security controls based on established architecture, standards, and organizational requirements.Ability to translate technical security requirements into repeatable processes, standards, procedures, and work instructions.Strong documentation skills with attention to accuracy, completeness, and auditability.Ability to balance security requirements with operational and business requirements and appropriately escalate risks or exceptions.Strong written and oral communication skills with the ability to communicate technical security concepts to both technical and non-technical audiences.Strong collaboration skills and the ability to work effectively across Security, Infrastructure, Cloud, End User Services, GRC, and business teams.Ability to prioritize multiple operational, incident response, engineering, and documentation responsibilities.Preferred Experience (not required)Experience securing Microsoft Azure and Microsoft 365 environments.Experience working within regulated or controlled environments supporting CMMC, NIST SP 800-171, or similar requirements.Experience with Microsoft Government Community Cloud High (GCC High) environments.Experience with Microsoft Defender, Microsoft Sentinel, Entra ID, Intune, CrowdStrike, or comparable security platforms.Experience with security automation, scripting, or workflow improvement using PowerShell, Python, APIs, or similar technologies.Experience performing or supporting incident response exercises, tabletop exercises, security assessments, or audit activities.Experience implementing CIS Benchmarks, DISA STIGs, or similar system-hardening standards.GCIH, Security+, CySA+, CISSP, or similar security certifications.Microsoft security certifications such as Azure Security Engineer Associate or other relevant Microsoft security credentials.Other relevant incident response, cloud security, or cybersecurity engineering certifications. Equal Opportunity Employer/Veterans/Disabled