Security Engineer

System One; Laurel (MD); Hybrid; USD 96,000 - 138,000; Full time

Benefits offered by this job

Health benefits

Dental coverage

Vision coverage

Life insurance

401(k) plan

Spending accounts

Voluntary plans

Job summary

System One is seeking an experienced Security Engineer for a 1099 contract position in the US. The role requires monitoring security systems, leading incident response, and refining detection capabilities within AWS GovCloud and FedRAMP/FISMA Moderate contexts.

You will collaborate across teams to track threats, implement secure SDLC practices, and maintain robust vulnerability management with a focus on reducing false positives.

Qualifications

• 5+ years of security engineering experience in FedRAMP or FISMA Moderate environments.
• Hands-on with UiPath architecture: Orchestrator, attended/unattended robots, assets and credential stores.
• Design and implementation of service accounts, credential vaulting, RBAC, separation of duties, and session/audit logging.

Responsibilities

• Monitor systems for abnormal activity; analyze alerts to identify threats.
• Lead incident response: containment, eradication, recovery, post-incident analysis.
• Refine alert thresholds; tune SIEM rules; integrate new data sources to reduce false positives.
• Produce weekly/monthly reports on incident trends, threat activity, and security posture.
• Participate in threat intel reviews and cross-departmental syncs.

Skills

FedRAMP/FISMA Moderate

AWS GovCloud

UiPath Orchestrator

RBAC/separation of duties

NIST SP 800-53 Rev 5

Vulnerability scanning

STIG/CIS hardening

Secure SDLC

Automation scripting

Tools

UiPath

AWS GovCloud tools

Job description

Job Title: Security Engineer
Location: On-site 4 days/week in Herndon or remote options
Type: Contract
Compensation:
Work Model: 1099; 1 year, up to 5 years possible
Hours: 40
Security Clearance: Public Trust Tier 2 / MBI
Monitor systems for abnormal activity. Analyze alerts, distinguish threats from false positives, categorize incidents by risk. - Lead incident response: containment, eradication, recovery, post-incident analysis, documenting steps. Optimize detection capabilities: refine alert thresholds, tune SIEM rules, integrate new data sources, reduce false positives. Compile weekly/monthly reports on incident trends, threat activity, and security posture for internal stakeholders. Actively participate in team meetings, threat intel reviews, and cross-departmental syncs.

Responsibilities

• Monitor systems for abnormal activity and analyze security alerts to identify potential threats.
• Lead incident response efforts, including containment, eradication, recovery, and post-incident analysis.
• Optimize detection capabilities by refining alert thresholds, tuning SIEM rules, and integrating new data sources to reduce false positives.
• Compile and present weekly/monthly reports on incident trends, threat activity, and overall security posture to internal stakeholders.
• Participate in team meetings, threat intelligence reviews, and cross-departmental synchronization efforts.

Requirements

• 5+ years of security engineering experience working for a FedRAMP or FISMA Moderate system in an AWS GovCloud environment.
• Hands-on experience with UiPath architecture: Orchestrator, attended/unattended robots, assets and credential stores, queues, and robot host builds.
• Design and implementation experience with service account models, credential vaulting, RBAC, separation of duties, and session/audit logging.
• Knowledge of NIST SP 800-53 Rev 5 Moderate controls applied in build decisions across AC, AU, CM, IA, and SC families.
• Experience with STIG/CIS hardening, vulnerability scanning, patch management, and configuration management.
• Understanding of secure SDLC processes and code review skills for automation workflows and scripts.
• Ability to translate engineering decisions into control language for the A&A team.

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.