Security Engineer

Johnson Technology Systems Inc; Reston (VA); Hybrid; USD 129,000 - 134,000; Full time

Job summary

JTSi (Johnson Technology Systems, Inc.) is seeking a Security Engineer to monitor systems, analyze alerts, and lead incident response for federal workloads. You will identify threats, reduce false positives, and maintain secure configurations in AWS GovCloud environments.

The role involves implementing NIST controls, hardening systems, and producing security posture reports for stakeholders. Remote-friendly with local eligibility near Herndon, VA; onsite four days a week if local.

Qualifications

• 5+ yrs security engineering for a FedRAMP or FISMA Moderate system in an AWS GovCloud environment.
• Hands-on UiPath architecture experience: Orchestrator, attended/unattended robots, Credential Stores, queues, and robot host builds.
• Design and implementation of service account models, credential vaulting, RBAC, separation of duties, and session/audit logging.
• Applied NIST SP 800-53 Rev 5 Moderate controls in build decisions across the AC, AU, CM, IA, and SC families.
• STIG/CIS hardening, vulnerability scanning, patch and configuration management.
• Secure SDLC and code review of automation workflows and scripts.
• Ability to translate engineering decisions into control language for the A&A team.
• Microsoft Excel, Excellent verbal and written communication skills, Microsoft Word

Responsibilities

• Monitor systems for abnormal activity and analyze alerts to distinguish threats from false positives.
• Lead incident response: containment, eradication, recovery, post-incident analysis.
• Tune SIEM rules, refine alert thresholds, and integrate new data sources.
• Compile weekly/monthly reports on incident trends and security posture for internal stakeholders.
• Participate in team meetings, threat reviews, and cross-departmental syncs.

Skills

FedRAMP

FISMA

AWS GovCloud

UiPath

RBAC

NIST SP 800-53

STIG/CIS

Secure SDLC

A&A translation

Excel

Communication

Tools

UiPath

AWS GovCloud

Job description

\"WE DO WHAT WE SAY \"
JTSi is a federal government consulting firm, providing technical services to the Federal Government, i.e., DoD, Client and various Civilian Agencies. We are proud to have earned the reputation of honesty, integrity and the ability to build long-term professional relationships with our employees and clients. Please visit our website at www.JTSUSA.com to learn more about who we are and what we do.

\"WE DO WHAT WE SAY \"
JTSi is a federal government consulting firm, providing technical services to the Federal Government, i.e., DoD, Client and various Civilian Agencies. We are proud to have earned the reputation of honesty, integrity and the ability to build long-term professional relationships with our employees and clients. Please visit our website at www.JTSUSA.com to learn more about who we are and what we do.

Company Name: - JTSi (Johnson Technology Systems, Inc.)

Title: Security Engineer

Location: Remote - Local to Herndon, VA preferred but will accept remote candidates. If local to Herndon, resource must be onsite 4 days per week.

Salary : $129K - $134K

Title: Security Engineer

• Monitor systems for abnormal activity. - Analyze alerts, distinguish threats from false positives, categorize incidents by risk. - Lead incident response: containment, eradication, recovery, post-incident analysis, documenting steps. - Optimize detection capabilities: refine alert thresholds, tune SIEM rules, integrate new data sources, reduce false positives. - Compile weekly/monthly reports on incident trends, threat activity, and security posture for internal stakeholders. - Actively participate in team meetings, threat Client reviews, and cross-departmental syncs.

Required Skills

\" 5+ yrs security engineering for a FedRAMP or FISMA Moderate system in an AWS GovCloud environment.

\" Hands-on UiPath architecture experience: Orchestrator, attended/unattended robots,and Credential Stores, queues, and robot host builds.

\" Design and implementation of service account models, credential vaulting, RBAC, separation of duties, and session/audit logging.

\" Applied NIST SP 800-53 Rev 5 Moderate controls in build decisions across the AC, AU, CM, IA, and SC families.

\" STIG/CIS hardening, vulnerability scanning, patch and configuration management.

\" Secure SDLC and code review of automation workflows and scripts.

\" Ability to translate engineering decisions into control language for the A&A team.

Other Required Skill Requirement

Microsoft Excel, Excellent verbal and written communication skills, Microsoft Word

We recruit, employ, train, compensate and promote without regard to race, religion, color, citizenship, national origin, age, sex, gender, gender identity/expression, sexual orientation, marital status, disability, genetic information, veteran status or any other characteristic protected by federal, state, or local law.

Disclaimer: Nothing in this job description/posting shall constitute an offer or promise of employment. If you are not reviewing this job posting on our Careers' site http://jtsusa.com/careers or one of our approved job boards we cannot guarantee the validity of this posting. For a list of our current postings, please visit us at http://jtsusa.com/careers