Security Engineer

JAAW™ Group; Hill Air Force Base (UT); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) retirement plan with employer 

Paid time off and holidays

Life insurance

Employee Assistance Program

Voluntary insurance options

Job summary

The JAAW Group LLC seeks a Security Engineer to support DoD systems at Hill Air Force Base. Responsibilities include architecting, deploying, and maintaining cybersecurity tooling, automation, and compliance in RMF/JSIG environments.

Applicants must hold an active Secret clearance (Top Secret preferred) and have 3+ years in security engineering, with Splunk experience and cloud security knowledge in AWS or Azure.

Qualifications

• Active Secret clearance required prior to onboarding; Top Secret preferred.
• U.S. citizenship required.
• 3+ years of security engineering experience.
• Hands-on with Splunk Enterprise administration and data normalization.
• Advanced Windows and Linux system administration and hardening.
• Experience with AWS and/or Azure cloud environments.
• Familiar with RMF and JSIG accreditation processes.
• Automation and configuration management with Ansible, Terraform, PowerShell, Bash, Python.

Responsibilities

• Support, administer, and maintain cybersecurity tools and platforms (SIEM, vulnerability management, endpoint security).
• Administer Splunk Enterprise: data onboarding, dashboards, alerts, correlation, normalization.
• Support vulnerability scanning using Nessus/ACAS and compliance tools (Evaluate-STIG, SCAP).
• Develop automated security processes with Ansible, Terraform, PowerShell, Bash, Python.
• Enhance security detections, telemetry, alerting, and incident response capabilities.
• Architect and deploy vulnerability management, auditing, logging, and patching solutions.
• Engineer security for AWS/Azure in RMF/JSIG context.
• Improve access controls, baselines, hardening, and endpoint security.
• Collaborate with ISSM/ISSO on RMF authorization activities and audits.
• Create and maintain runbooks, SOPs, and architecture designs.
• Provide security engineering guidance to DevOps and platform teams.

Job description

Security Engineer

Location: Hill Air Force Base, UT. Clearance Required: Secret; Top Secret preferred. Employment Type: Full-Time.

About the Role

The JAAW Group LLC, a Service-Disabled Veteran-Owned Small Business (SDVOSB), is seeking a Security Engineer to support secure, mission-critical Department of Defense systems at Hill Air Force Base. This role is responsible for architecting, engineering, deploying, and maintaining cybersecurity solutions while supporting compliance with the Risk Management Framework (RMF), Joint Special Access Program Implementation Guide (JSIG), and related security requirements. The Security Engineer will work closely with ISSOs, DevOps, platform, and infrastructure teams to strengthen system security, deploy and maintain cybersecurity tooling, automate security processes, support vulnerability management and incident response, and ensure security requirements are incorporated into enterprise and cloud environments.

Responsibilities

• Support, administer, and maintain cybersecurity tools and platforms, including SIEM, vulnerability management, compliance, and endpoint security technologies.
• Administer and support Splunk Enterprise, including data onboarding, dashboards, alerts, correlation, and data normalization.
• Support vulnerability scanning and management using Nessus/ACAS and compliance assessment tools such as Evaluate-STIG and SCAP Compliance Checker.
• Develop and automate security processes using Ansible, Terraform, PowerShell, Bash, Python, or similar technologies.
• Develop and improve security detections, telemetry, alerting, and incident response capabilities.
• Architect and deploy solutions supporting vulnerability management, auditing, logging, patch management, and risk remediation.
• Engineer and implement security requirements for AWS and Azure cloud environments in accordance with RMF and JSIG.
• Improve system security through access controls, configuration baselines, system hardening, and endpoint security.
• Partner with ISSM and ISSO teams on RMF authorization activities, continuous monitoring, control implementation, and audit preparation.
• Develop and maintain technical documentation, including standard operating procedures, runbooks, and architectural designs.
• Provide security engineering recommendations to DevOps and platform teams supporting complex system architectures.

Required Qualifications

• Active Secret security clearance required prior to onboarding; Top Secret preferred.
• U.S. citizenship required.
• DoD IASAE Level II certification, such as CASP+ or CISSP, or ability to obtain within 3 months of hire.
• At least 3 years of experience in a security engineering role.
• Hands-on experience with Splunk Enterprise, including administration, data normalization, alerting, and correlation.
• Advanced working knowledge of Windows and Linux system administration, hardening, and security; RHEL experience preferred.
• Experience with AWS and/or Microsoft Azure environments, cloud security concepts, and hybrid deployments.
• Experience with cybersecurity engineering disciplines, including vulnerability assessment, patch and configuration management, monitoring, access control, and incident response.
• Experience with automation and configuration management technologies such as Ansible, Terraform, PowerShell, Bash, or Python.
• Familiarity with RMF and JSIG accreditation processes.
• Strong understanding of TCP/IP networking and network security.
• Ability to work effectively in an Agile, fast-paced, mission-focused environment.

Preferred Qualifications

• Active Top Secret security clearance.
• 5+ years of security engineering experience.
• AWS or Microsoft Azure technical certifications.
• Bachelor's or Master's degree in Computer Science, Software Engineering, Information Assurance, Cybersecurity, or a related field.
• Experience supporting security incident response teams, including NOC or SOC environments.
• Familiarity with container security technologies, including Docker, Kubernetes, ECS, EKS, or AKS.
• Experience supporting Department of Defense or other classified government environments.

Benefits

The JAAW Group offers a competitive benefits package designed to support our employees and their families, including:

• Medical, dental, and vision insurance
• 401(k) retirement plan with employer matching
• Paid time off and paid sick leave
• Paid holidays
• Employer-paid life insurance
• Employee Assistance Program (EAP)
• Voluntary supplemental insurance options