Security Engineer

Creative G C; Herndon (VA); Remote; USD 110,000 - 150,000; Full time

Job summary

Creative G C is seeking a Security Engineer to monitor systems, analyze alerts, and lead incident response for a 12-month contract. You will optimize detection, tune SIEM rules, and integrate new data sources to reduce false positives, while coordinating with threat intel and cross‑departmental teams.

The role requires hands-on UiPath architecture experience, strong knowledge of NIST SP 800-53 controls, and adherence to secure SDLC principles to strengthen the organization’s security posture.

Qualifications

• 5+ yrs security engineering for a FedRAMP or FISMA Moderate system in AWS GovCloud.
• Hands-on UiPath architecture experience: Orchestrator, attended/unattended robots, assets, credential stores, queues, robot host builds.
• Design and implementation of service account models, credential vaulting, RBAC, separation of duties, and session/audit logging.
• Applied NIST SP 800-53 Rev 5 Moderate controls in build decisions across AC, AU, CM, IA, and SC families.
• STIG/CIS hardening, vulnerability scanning, patch and configuration management.
• Secure SDLC and code review of automation workflows and scripts.
• Ability to translate engineering decisions into control language for the A&A team.

Responsibilities

• Monitor systems for abnormal activity.
• Analyze alerts, distinguish threats from false positives, and categorize incidents by risk.
• Lead incident response: containment, eradication, recovery, post-incident analysis, documenting steps.
• Optimize detection capabilities: refine alert thresholds, tune SIEM rules, integrate new data sources, and reduce false positives.
• Compile weekly/monthly reports on incident trends, threat activity, and security posture for internal stakeholders.
• Actively participate in team meetings, threat intel reviews, and cross-departmental syncs.

Skills

FedRAMP/FISMA Moderate security

UiPath architecture

CIS/STIG hardening

NIST SP 800-53 Rev 5 controls

Secure SDLC

RBAC and credential vaulting

A&A translation for controls

Job description

Job Details:

Title: Security Engineer

Location: Remote (Herndon, VA)

Duration: 12 Months Contract

Clearance:
Able to obtain MBI Clearance

Job Summary:

• Monitor systems for abnormal activity.
• Analyze alerts, distinguish threats from false positives, and categorize incidents by risk.
• Lead incident response: containment, eradication, recovery, post-incident analysis, documenting steps.
• Optimize detection capabilities: refine alert thresholds, tune SIEM rules, integrate new data sources, and reduce false positives.
• Compile weekly/monthly reports on incident trends, threat activity, and security posture for internal stakeholders.
• Actively participate in team meetings, threat intel reviews, and cross-departmental syncs.

Required Skills:

• 5+ yrs security engineering for a FedRAMP or FISMA Moderate system in an AWS GovCloud environment.
• Hands-on UiPath architecture experience: Orchestrator, attended/unattended robots, Assets and Credential Stores, queues, and robot host builds.
• Design and implementation of service account models, credential vaulting, RBAC, separation of duties, and session/audit logging.
• Applied NIST SP 800-53 Rev 5 Moderate controls in build decisions across the AC, AU, CM, IA, and SC families.
• STIG/CIS hardening, vulnerability scanning, patch and configuration management.
• Secure SDLC and code review of automation workflows and scripts.
• Ability to translate engineering decisions into control language for the A&A team.