Security Engineer II

Insight Global; Reston (VA); On-site; USD 100,000 - 135,000; Full time

Job summary

Insight Global is seeking a Security Engineer II in Reston, VA to design, operate, and maintain robust security monitoring and auditing capabilities for a global platform. You will develop and support monitoring/audit solutions providing visibility, detection, and alerting for incident response and forensics.

The role collaborates with architects, security engineers, and operations teams, refining metrics, logs, and alerts to enhance security coverage and reduce noise.

Qualifications

• Bachelor's degree in computer science or a related field (or equivalent experience).
• 3+ years of hands-on experience in security operations, monitoring, or related cybersecurity roles.
• Practical experience with logging, monitoring, and SIEM/dashboarding tools such as AWS GuardDuty, Grafana, CrowdStrike, Splunk.
• Working knowledge of cloud orchestration and container platforms Kubernetes.
• Working knowledge of cloud platform (AWS).
• Hands-on experience with at least one programming or scripting language (e.g., Python, Shell, Go).
• Strong understanding of log handling and telemetry pipelines, including log collection, aggregation, integration with downstream systems, and alert configuration/tuning based on policies and thresholds.
• Familiarity with the MITRE ATT&CK framework and/or the Lockheed Martin Cyber Kill Chain is a plus.
• FedRAMP experience
• Relevant certifications (e.g., Security+, GSEC, CISSP)

Responsibilities

• Partner with software architects, security engineers, operations/SRE teams, compliance experts, and business stakeholders to understand system boundaries and define what needs to be monitored and audited.
• Identify, implement, and continuously refine metrics, logs, and alerts to improve operational visibility, incident detection, response effectiveness, availability, and forensic readiness across the platform.
• Integrate logging and monitoring pipelines with existing tools and platforms (e.g., SIEM, EDR, dashboards) and ensure data quality, coverage, and usability.
• Tune alerts and thresholds to reduce noise while maintaining strong coverage for security and operational events.
• Drive DevSecOps practices across the software development lifecycle by integrating security controls, automated compliance checks, vulnerability scanning, policy enforcement, secret management, and threat detection into CI/CD pipelines.
• Leverage Generative AI and AI-assisted security tooling to improve operational efficiency, accelerate investigations, automate repetitive tasks, enhance threat detection, and support security engineering workflows.
• Working on-call and weekend shifts might be needed as per business need

Skills

Security operations

Monitoring

Scripting

DevSecOps

Cloud security

Education

Bachelor's degree in CS or related field

Tools

AWS GuardDuty

Grafana

CrowdStrike

Splunk

Kubernetes

AWS

Job description

Job Description

About the Position

An employer is seeking a Security Engineer II to design, integrate, operate, and maintain robust security monitoring and auditing capabilities across our global platform. The platform delivers a scalable and secure way to deploy applications worldwide. In this role, you will develop and support monitoring and audit solutions that provide the visibility, detection, and alerting needed to protect the platform and enable effective incident response and forensics.

Key Responsibilities

• Partner with software architects, security engineers, operations/SRE teams, compliance experts, and business stakeholders to understand system boundaries and define what needs to be monitored and audited.
• Identify, implement, and continuously refine metrics, logs, and alerts to improve operational visibility, incident detection, response effectiveness, availability, and forensic readiness across the platform.
• Integrate logging and monitoring pipelines with existing tools and platforms (e.g., SIEM, EDR, dashboards) and ensure data quality, coverage, and usability.
• Tune alerts and thresholds to reduce noise while maintaining strong coverage for security and operational events.
• Drive DevSecOps practices across the software development lifecycle by integrating security controls, automated compliance checks, vulnerability scanning, policy enforcement, secret management, and threat detection into CI/CD pipelines.
• Leverage Generative AI and AI-assisted security tooling to improve operational efficiency, accelerate investigations, automate repetitive tasks, enhance threat detection, and support security engineering workflows.
• Working on-call and weekend shifts might be needed as per business need

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [e-mail] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

• Bachelor's degree in computer science or a related field (or equivalent experience).
• 3+ years of hands-on experience in security operations, monitoring, or related cybersecurity roles.
• Practical experience with logging, monitoring, and SIEM/dashboarding tools such as AWS GuardDuty, Grafana, CrowdStrike, Splunk.
• Working knowledge of cloud orchestration and container platforms Kubernetes.
• Working knowledge of cloud platform (AWS).
• Hands-on experience with at least one programming or scripting language (e.g., Python, Shell,Go).
• Strong understanding of log handling and telemetry pipelines, including log collection, aggregation, integration with downstream systems, and alert configuration/tuning based on policies and thresholds.
• Familiarity with the MITRE ATT&CK framework and/or the Lockheed Martin Cyber Kill Chain is a plus.
• Solid understanding of the security and operational challenges in large-scale, distributed systems.
• FedRAMP experience
• Relevant certifications (e.g., Security+, GSEC, CISSP)