Security Engineer (Cross-Functional) | SME

Amatriot Group, LLC; Chantilly (VA); Presencial; USD 115.000 - 195.000; Jornada completa

Descripción de la vacante

Amatriot Group, LLC is seeking a Security Engineer (Cross-Functional) in Chantilly, VA with an active TS clearance or higher. The role covers security across applications, platforms, and cloud environments, and emphasizes incident response planning and cyber resiliency.

The engineer will design monitoring and alerting to detect anomalies, manage cryptographic keys, and collaborate with government partners to advise on vulnerabilities and security improvements.

Formación

• Minimum of 10 years of security experience.
• Experience with cloud technology.
• Active TS clearance or higher.
• Ability to design incident response and monitoring.

Responsabilidades

• Secure applications and platforms across data and networks.
• Develop incident response and recovery plans.
• Design monitoring and alerting for anomalies across systems.
• Operate secure cloud infrastructure and networks.
• Manage COMSEC resources or CKMS duties.
• Coordinate with industry partners for vulnerabilities and recommendations.

Conocimientos

Incident response

Cyber resiliency

Web security testing

Monitoring and alerting

Cloud security

Key management

COMSEC resources

Security governance

Vulnerability management

Defense-in-depth

Herramientas

CKMS

Descripción del empleo

Security Engineer (Cross-Functional) | SME

Location: Chantilly, VA
Security Clearance: Active TS or higher [Required]
Job Type: Full-Time
Target Salary Range*:$115,000 - $195,000

*This represents the potential salary range for this position depending on education level, years of experience and\/or certifications in addition to other position specific requirements which may impact salary

Position Overview

The Security Engineer (Cross-Functional) is responsible for security across multiple applications, platforms, and cloud environments. This role develops incident response and recovery plans, supports cyber resiliency, and designs monitoring and alerting capabilities to detect anomalous activity. The engineer maintains secure cloud infrastructure, manages communication security resources or cryptographic keys, and coordinates with industry partners to advise the government on vulnerabilities and security recommendations.

Key Responsibilities

Application and Platform Security

• Secure multiple applications and platforms, including critical data and vulnerability points.
• Perform web application and platform security testing.
• Protect organizational websites, Internet transactions, confidential order information, and external business-to-business connections.
• Apply Internet firewall and encryption technologies to maintain organizational and customer security.

Security Monitoring and Incident Response

• Develop incident response and recovery plans.
• Design monitoring and alerting capabilities to identify anomalous activity across multiple systems.
• Monitor applications and platforms for anomalous activity.
• Correlate data to support detection, remediation, monitoring, and recommendations for changes.
• Support cyber resiliency and security planning.

Secure Cloud Infrastructure and Operations

• Operate secure cloud infrastructure, platforms, and software.
• Install, maintain, and upgrade cloud computing environments and core infrastructure.
• Develop, build, maintain, upgrade, and continuously improve cloud networks and cloud-based systems.
• Apply defense-in-depth security governance policies and guidelines to cloud environments.

Communication Security and Key Management

• Manage organizational communication security (COMSEC) resources in accordance with CNSSI 4009, or serve as a key custodian for a cryptographic key management system (CKMS).

Security Governance and Partner Coordination

• Coordinate with industry partners to advise the government on security vulnerabilities and recommendations.
• Update and delete user accounts.
• Monitor compliance violations and perform follow-up activities.
• Develop security policies, practices, and guidelines.

Qualifications

Education

Experience

• Minimum of 10 years of experience.
• Experience with cloud technology.

Skills

• Ability to develop incident response and recovery plans.
• Knowledge of cyber resiliency, security planning, and web application and platform security testing.
• Ability to design monitoring and alerting capabilities and correlate security data across systems.
• Understanding of application-critical data and vulnerability points.
• Technical capabilities supporting secure cloud infrastructure, platforms, software, and networks.
• Knowledge of defense-in-depth security governance policies and guidelines.
• Ability to manage COMSEC resources or perform CKMS key custodian duties.
• Knowledge of Internet firewalls, encryption technologies, website security, and transaction protection.
• Ability to develop security policies and coordinate vulnerability recommendations with industry and government stakeholders.