Security Engineer (Cross-Functional) | SME

The Amatriot Group; Chantilly (VA); On-site; USD 115,000 - 195,000; Full time

Job summary

The Amatriot Group in Chantilly, VA is seeking a Security Engineer (Cross-Functional) to oversee security across applications, platforms, and cloud environments. You will develop incident response plans, support cyber resiliency, and design monitoring and alerting to detect anomalies.

The role requires a Bachelor’s degree and 10+ years of experience in security, with an active TS or higher clearance. You will collaborate with government partners to advise on vulnerabilities and security

Qualifications

• Bachelor’s degree required.
• 10+ years of experience in security engineering or related fields.
• Experience with cloud technology.

Responsibilities

• Secure multiple applications and platforms; protect data and transactions.
• Develop incident response and recovery plans; monitor for anomalous activity.
• Design monitoring and alerting across systems; correlate data for security decisions.
• Operate secure cloud infrastructure and manage core infrastructure.
• Manage COMSEC resources or CKMS duties and maintain cryptographic keys.
• Coordinate with industry partners and government stakeholders on vulnerabilities and recommendations.
• Develop and update security policies, practices, and guidelines.

Skills

Incident response planning

Cyber resiliency

Security monitoring

Cloud security

COMSEC/CKMS

Vulnerability management

Firewall & encryption

Security governance

Collaboration with government

Education

Bachelor’s degree

Job description

Location: Chantilly, VA

Security Clearance: Active TS or higher [Required]

Job Type: Full-Time

Target Salary Range*: $115,000 - $195,000

• This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary

Position Overview

The Security Engineer (Cross-Functional) is responsible for security across multiple applications, platforms, and cloud environments. This role develops incident response and recovery plans, supports cyber resiliency, and designs monitoring and alerting capabilities to detect anomalous activity. The engineer maintains secure cloud infrastructure, manages communication security resources or cryptographic keys, and coordinates with industry partners to advise the government on vulnerabilities and security recommendations.

Key Responsibilities

Application and Platform Security

• Secure multiple applications and platforms, including critical data and vulnerability points.
• Perform web application and platform security testing.
• Protect organizational websites, Internet transactions, confidential order information, and external business-to-business connections.
• Apply Internet firewall and encryption technologies to maintain organizational and customer security.

Security Monitoring and Incident Response

• Develop incident response and recovery plans.
• Design monitoring and alerting capabilities to identify anomalous activity across multiple systems.
• Monitor applications and platforms for anomalous activity.
• Correlate data to support detection, remediation, monitoring, and recommendations for changes.
• Support cyber resiliency and security planning.

Secure Cloud Infrastructure and Operations

• Operate secure cloud infrastructure, platforms, and software.
• Install, maintain, and upgrade cloud computing environments and core infrastructure.
• Develop, build, maintain, upgrade, and continuously improve cloud networks and cloud-based systems.
• Apply defense-in-depth security governance policies and guidelines to cloud environments.

Communication Security and Key Management

• Manage organizational communication security (COMSEC) resources in accordance with CNSSI 4009, or serve as a key custodian for a cryptographic key management system (CKMS).

Security Governance and Partner Coordination

• Coordinate with industry partners to advise the government on security vulnerabilities and recommendations.
• Update and delete user accounts.
• Monitor compliance violations and perform follow-up activities.
• Develop security policies, practices, and guidelines.

Qualifications

Education

• Bachelor’s degree required.

Experience

• Minimum of 10 years of experience.
• Experience with cloud technology.

Skills

• Ability to develop incident response and recovery plans.
• Knowledge of cyber resiliency, security planning, and web application and platform security testing.
• Ability to design monitoring and alerting capabilities and correlate security data across systems.
• Understanding of application-critical data and vulnerability points.
• Technical capabilities supporting secure cloud infrastructure, platforms, software, and networks.
• Knowledge of defense-in-depth security governance policies and guidelines.
• Ability to manage COMSEC resources or perform CKMS key custodian duties.
• Knowledge of Internet firewalls, encryption technologies, website security, and transaction protection.
• Ability to develop security policies and coordinate vulnerability recommendations with industry and government stakeholders.