Security Engineer

Anavationllc; Washington (District of Columbia); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Disability insurance

Vision insurance

401(k) with match

Paid leave

Tuition reimbursement

Life insurance

Job summary

AnaVation is seeking a Security Engineer to assist the client leadership with system security engineering and administration. The ideal candidate will be comfortable engaging with client leadership on a regular basis and interacting with senior level team members.

The role requires hands-on experience with security tools (Tenable/Nessus, Qualys, Splunk, CrowdStrike) and a track record of incident response, vulnerability management, and security audits.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
• 6 years of experience in information system engineering and configuration management.
• 6 years of experience in system security analysis and implementation and secure system engineering or design.
• Hands‑on experience with security monitoring and evaluation, including audits, assessment, and risk management.
• Familiarity with Linux (RHEL 7/8), Windows OS, and Oracle/SQL Databases.
• Certifications: Security+.
• Certifications: CISSP.

Responsibilities

• Perform system and security administration for security tools (e.g., TenableSC/IO, Qualys, Burpsuite).
• Perform system administration tasks (log management, availability monitoring, access reviews).
• Apply updates and patches to security tools.
• Configure, manage, and schedule vulnerability scans.
• Advise client on data and vulnerability points; coordinate with partners for government security advisories.
• Support Incident Response activities including triage, investigation, and reporting.
• Develop security documentation and awareness; present vulnerability analyses to admins and leadership.
• Coordinate security audits related to vulnerability scanning and analysis.

Skills

Excellent communication

Agile methodologies

Security monitoring

Risk management

Education

Bachelor’s degree in Cybersecurity/IT

Tools

Splunk

CrowdStrike

Tenable/Nessus

Qualys

Burp Suite

McAfee NSM

CSAM

Job description

Be Challenged and Make a Difference

In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.

Description of Task to be Performed

AnaVation is looking for a Security Engineer to assist the client leadership with system security engineering and administration. The ideal candidate will be comfortable engaging with client leadership on a regular basis and interacting with senior level team members.

Responsibilities

• Perform system and security administration for security tools such as vulnerability scanning tools (e.g., TenableSC/IO, Qualys, Burpsuite), EDR tools (e.g., Crowdstrike), SIEM tools (e.g., Splunk) and other security tools (e.g., McAfee (NSM), GRC tool (CSAM)).
• Perform system administration tasks to include audit and log management, availability monitoring and remediation, account management and access reviews, and configuration update scheduling and performance.
• Perform application updates and patches to security tools.
• Configure, manage, and schedule vulnerability scans.
• Understand and advise the client regarding critical application data and vulnerability points, coordinate with industry partners to advise the government regarding those security vulnerabilities, and provide recommendations and advice on incident response and recovery plans.
• Provide Incident Response (IR) activities including triage, investigating, interviewing, resolving, and reporting on events. Create, update, and/or revise the IR Playbook and IR Plan.
• Promote information security awareness across the program, ensuring security controls and processes are implemented, and develop appropriate security-related documentation.
• Present vulnerability analysis to system admins, system owners, and leadership.
• Serve as the point of contact during security audits that pertain to vulnerability scanning and analysis.

Location and Travel

This position is hybrid, with the potential for periodic onsite attendance at our customer location in Alexandria, VA. Applicants who do not currently reside within commuting distance should describe how they would satisfy this requirement. Remote status is subject to change at the customer’s direction.

Public Trust

This position requires a Public Trust.

Education

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field.

Minimum Qualifications (Education/Certificates, Experience, Physical, etc.)

• 6 years of experience in information system engineering and configuration management.
• 6 years of experience in system security analysis and implementation and secure system engineering or design.
• Excellent communication skills.
• Hands‑on experience with security monitoring and evaluation, including audits, assessment, and risk management.
• Splunk.
• Crowdstrike.
• Tenable/Nessus.
• Qualys.
• Web App Scanning tools (e.g., Burpsuite).
• Microsoft Excel and other MS Office products.
• Able to deliver and present vulnerability analysis to a wide range of audiences (e.g., system admins, system owners, leadership).
• Familiarity with Linux (RHEL 7/8), Windows Operating Systems, and Oracle/SQL Databases.
• Agile Methodologies.
• GRC Tools (e.g., CSAM).
• Certifications: Security+.
• Strong desire to learn, grow and is highly motivated.
• Knowledgeable on different cloud providers: AWS, Azure, Oracle, GCP.
• Understanding of cloud systems and security tools.
• Certifications: CISSP.

Benefits

• Generous cost sharing for medical insurance for the employee and dependents.
• 100% company‑paid dental insurance for employees and dependents.
• 100% company‑paid long‑term and short‑term disability insurance.
• 100% company‑paid vision insurance for employees and dependents.
• 401(k) plan with generous match and 100% immediate vesting.
• Competitive pay.
• Generous paid leave and holiday package.
• Tuition and training reimbursement.
• Life and AD&D insurance.

About AnaVation

AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a U.S. owned company headquartered in Chantilly, Virginia, delivering groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operational success of our customers. We offer complex challenges, a top‑notch work environment, and a world‑class, collaborative team.

Equal Employment Opportunity Statement

AnaVation is an equal‑opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.