Security Engineering Specialist: Build Secure Platforms

Umbra; Arlington (VA); On-site; USD 145,000 - 175,000; Full time

Benefits offered by this job

Flexible Time Off (FT0)

Medical, Dental, Vision, Life, LTD,STD

401k with company contribution

Stock Options

Free Parking

Free lunch daily in office

Job summary

Umbra is seeking a Security Operations Engineer to design, implement, and continuously improve security controls across corporate IT platforms. This role acts as the primary conduit between InfoSec and IT execution, ensuring security policies become durable, auditable technical controls.

Based in our Arlington, VA or Reston, VA offices, you will own the security configuration control plane for corporate IT, including identity, access, email security, data protection, and endpoint posture,

Qualifications

• 5+ years in security engineering or related roles.
• Hands-on vulnerability lifecycle management.
• Email authentication: SPF, DKIM, DMARC.
• Security controls across IAM, endpoint, network and cloud.
• Translate policy into enforceable technical implementation.
• Coordinate patches and change-management activities.
• Assist in audit and compliance evidence collection.
• Strong troubleshooting and incident response skills.

Responsibilities

• Design, implement, and operate security controls across identity, endpoint, network, cloud, email, and SaaS environments.
• Own vulnerability management lifecycle, including scanning, prioritization, remediation coordination, validation, and reporting.
• Administer vulnerability scanning tools and drive remediation with owners.
• Design and maintain email security controls (SPF, DKIM, DMARC) and secure routing.
• Design and tune DLP controls across email, endpoints, cloud storage, and SaaS.
• Secure and operate IAM capabilities including SSO, MFA, SCIM/JIT, PAM, and access reviews.
• Maintain security baselines for Windows and macOS, including encryption and patching.
• Implement network and cloud security guardrails, logging, and controls.
• Operate and tune monitoring/detection and support investigation/remediation.
• Maintain technical documentation for NIST, CMMC, FedRAMP and compliance.

Skills

Security engineering

Vulnerability management

Identity & Access Management

Endpoint security

Network security

Cloud security

Incident response

Automation

Compliance & audit readiness

Cross-functional collaboration

Tools

Tenable/Nessus

BigFix

Okta

Python

PowerShell

Bash

Job description

Umbra is seeking a Security Operations Engineer to design, implement, and continuously improve security controls across corporate IT platforms. This role acts as the primary conduit between InfoSec and IT execution, ensuring security policies become durable, auditable technical controls.

Based in our Arlington, VA or Reston, VA offices, you will own the security configuration control plane for corporate IT, including identity, access, email security, data protection, and endpoint posture,