Security Engineer - ISCM & Cloud Security Lead

ECS; Portland (OR); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Everforth ECS is seeking a Security Engineer to help mature an Information Security Continuous Monitoring (ISCM) program for a federal client in Portland, OR. The role emphasizes translating security requirements into concrete controls, building dashboards, and enabling automation.

Responsibilities span SIEM engineering, vulnerability management, and cloud security across hybrid environments. Collaboration with DevOps, IT, and leadership is essential in a distributed federal setting.

Qualifications

• Minimum five years of experience in security engineering or related roles.
• Strong OS knowledge (Linux/Windows) and networking fundamentals.
• Understanding of attack techniques, defensive controls, and secure configurations.
• Hands-on experience with SIEM, EDR/XDR, IDS/IPS, vulnerability scanners, and firewalls.
• Experience in incident response and remediation planning.
• Scripting or automation using Python, Bash, PowerShell.
• Ability to work independently and communicate risks clearly.

Responsibilities

• Implement and maintain security controls across network, endpoint, cloud, application, and enterprise infrastructure.
• Evaluate and recommend security tools and configurations.
• Embed security into system lifecycles and CI/CD pipelines.
• Design, tune, and validate detection logic and alerts.
• Assist incident response and triage, containment, and recovery.
• Perform root cause analysis and drive corrective actions.
• Support threat hunting and risk assessment.
• Develop automation to improve security operations.

Skills

Security engineering

Linux

Windows

Networking

Scripting/Automation

Communication

Tools

SIEM

EDR/XDR

IDS/IPS

Vulnerability scanners

Firewalls

Python

Bash

PowerShell

Cloud tooling

IaC/CI-CD

Job description

Everforth ECS is seeking a Security Engineer to help mature an Information Security Continuous Monitoring (ISCM) program for a federal client in Portland, OR. The role emphasizes translating security requirements into concrete controls, building dashboards, and enabling automation.

Responsibilities span SIEM engineering, vulnerability management, and cloud security across hybrid environments. Collaboration with DevOps, IT, and leadership is essential in a distributed federal setting.