Security Engineer

Everforth, Inc.; Portland (OR); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Everforth ECS in Portland, OR is seeking a Security Engineer to advance an ISCM program for a federal client. You will translate complex security requirements into practical controls, build dashboards, and drive continuous visibility across enterprise systems.

The role emphasizes SIEM engineering, vulnerability management, automation, and collaboration with DevOps and compliance teams. Hybrid work aligns with client core hours 7am–3pm PT.

Qualifications

• 5+ years in security engineering or closely related roles.
• Strong experience with SIEM, EDR/XDR, IDS/IPS, vulnerability scanners.
• Hands-on scripting in Python, Bash, or PowerShell.
• Cloud security experience in AWS, Azure, or hybrid environments.
• Ability to communicate risks and recommendations to technical and leadership audiences.

Responsibilities

• Implement and maintain security controls across network, endpoint, cloud, application, and enterprise infrastructure.
• Design, tune, and validate detection logic, alerts, and analytics for threats.
• Lead vulnerability management activities and risk-based reporting.
• Develop automation and tooling to improve security operations and CI/CD workflows.
• Collaborate with IT, DevOps, and SOC teams to integrate security tooling into workflows.

Skills

SIEM engineering

Log pipeline

Python scripting

Cloud security

Incident response

Linux/Windows

Tools

Axonius CAASM

EDR/XDR

Firewalls

Vulnerability scanners

CI/CD tooling

Job description

Everforth ECS is seeking a Security Engineer to join our team in Portland, OR (Hybrid).

Position Summary

The Security Engineer will support development and maturation of an Information Security Continuous Monitoring (ISCM) program for a federal customer. You will interpret complex federal security requirements, translate compliance mandates into practical security control implementations, and drive continuous visibility across enterprise systems.

This role combines deep expertise in security control frameworks with hands‑on technical execution. Key focus areas include SIEM engineering, log pipeline optimization, and developing actionable dashboards and visualizations that communicate risk and operational health to technical teams and leadership. The role will lead risk‑based vulnerability management efforts, leverage Cyber Asset Attack Surface Management (CAASM) tooling (specifically Axonius) to eliminate asset visibility blind spots, and build automations to streamline continuous monitoring workflows. Cloud security experience (AWS, Azure, or hybrid environments) is highly desirable as the environment evolves.

The ideal candidate is collaborative, analytical, and comfortable bridging the gap between high‑level security control requirements and hands‑on engineering – ensuring practical, measurable security outcomes across complex, distributed federal environments.

The client this role supports is located in Portland, OR; remote candidates should expect that their work hours will closely align with the client’s core hours of 7 a.m. – 3 p.m. PT.

Key Responsibilities

Security Engineering

• Implement and maintain security controls across network, endpoint, cloud, application, and enterprise infrastructure environments
• Evaluate and recommend security tools, technologies, and configurations
• Embed security into system lifecycles, engineering workflows, operational processes, and production environments

Detection, Monitoring, and Incident Response

• Design, tune, and validate detection logic, alerts, monitoring rules, and analytics for threats and anomalous activity
• Assist and support incident response activities, including triage, investigation, containment, remediation, and recovery coordination
• Perform root cause analysis and drive long‑term corrective actions after security incidents or control failures
• Support threat hunting, proactive risk identification, and security assessment activities

Vulnerability and Risk Management

• Oversee vulnerability management activities, including prioritization, remediation guidance, exception review, and risk‑based reporting
• Conduct security assessments, configuration reviews, hardening activities, and technical control validation
• Support compliance, audit, and risk management initiatives by providing technical evidence, analysis, and remediation plans
• Translate technical findings into practical risk and mitigation recommendations for technical and leadership audiences

Automation and Engineering Excellence

• Develop scripts, tooling, automation, and repeatable workflows to improve security operations, monitoring, and response efficiency
• Partner with DevOps, SRE, infrastructure, and engineering teams to integrate security tooling into CI/CD pipelines and operational workflows
• Improve reliability, scalability, performance, and maintainability of security platforms and integrations
• Document engineering standards, runbooks, design decisions, and operational procedures

Technical Collaboration

• Serve as an escalation point and for complex security engineering issues
• Work with operational team to document processes and requirements
• Collaborate cross‑functionally with IT, DevOps, product, application, cloud, compliance, and SOC teams
• A minimum of five years of experience in security engineering or closely related technical security roles
• Strong expertise with Linux and Windows operating systems, networking concepts and protocols, and common enterprise system architectures
• Strong understanding of common attack techniques, defensive controls, detection approaches, and secure configuration practices
• Hands‑on experience with enterprise security tools such as SIEM, EDR/XDR, IDS/IPS, vulnerability scanners, and firewalls
• Experience contributing to incident response efforts, root cause analysis, and remediation planning
• Strong scripting or automation skills using Python, Bash, PowerShell, or similar languages
• Ability to operate independently, prioritize competing technical issues, and make sound decisions under pressure
• Strong written and verbal communication skills, including the ability to document and effectively communicate risks, findings, tradeoffs, and recommendations to technical teams and leadership

Tools and Technologies

• SIEM platforms
• EDR/XDR platforms
• IDS/IPS technologies
• Vulnerability scanners
• Firewalls and network security platforms
• Linux and Windows systems
• Python, Bash, PowerShell, or similar scripting languages
• Cloud security tooling
• Infrastructure as code and CI/CD tooling
• Advanced security engineering
• Secure architecture and control design

Desired Skills

Preferred Qualifications

• Experience with cloud security in AWS, Azure, GCP, or hybrid cloud environments.
• Familiarity with infrastructure as code, configuration management, CI/CD tooling, and DevSecOps practices
• Experience supporting regulated, high‑availability, government, finance, healthcare, or mission‑critical environments
• Experience designing security controls for large‑scale or highly distributed enterprise environments
• Experience leading technical workstreams or acting as an architecture authority

Preferred Certifications

• CISSP
• GIAC certifications
• Security+
• CEH
• Cloud security or vendor‑specific certifications

#EverforthECS1

ECSFederal LLCis an equal opportunity employer and does not discriminate or allow discrimination on thebasisany characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or localjurisdictionlaw.

Everforth ECS is the federal segment of Everforth , a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission‑critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We value:

• Attracting and developing top talent and high‑performing teams
• Fostering a culture that is engaging, accountable, and mission‑driven

Meet the challenge. Make a difference withEverforthECS!

undefined

Our Company

Our Culture

Employer Privacy Policy

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

Everforth ECS is the federal segment of Everforth , a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission‑critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

Meet the challenge. Make a difference with Everforth ECS!

ADP Privacy Statement Artificial Intelligence Google Privacy Policy Google Terms of Service