Security Operations Architect & Incident Response Leader

Air; Arlington (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Air is seeking a Security Engineer to help build and mature a security organization in Arlington, VA. You will lead and perform incident response, vulnerability management, and security engineering across endpoints, identities, cloud services, and on‑premise systems.

You will own runbooks, drive automation, and collaborate across IT and security teams to implement practical security controls and processes aligned with governance standards. This is an onsite, full‑time role with travel up to 10%.

Qualifications

• 6–10 years of hands-on security operations and IR experience.
• Experience with CrowdStrike (EDR) required.
• Strong IT and systems engineering fundamentals for security.
• Experience securing cloud/SaaS environments and IAM.

Responsibilities

• Run Daily Security Operations across Google Workspace, CrowdStrike, cloud, and network; triage and resolve issues.
• Own Incident Response lifecycle from triage to recovery; build and exercise playbooks.
• Own Vulnerability Management across endpoints, servers, and cloud; drive remediation.
• Configure and harden endpoints, IAM, and cloud/SaaS platforms; support secure system administration.
• Establish and mature processes, runbooks, and tooling to align with CMMC/NIST 800-171 and CUI obligations.
• Automate repetitive tasks using Python or equivalent to scale security operations.
• Create runbooks and documentation to raise the security IQ of the team.

Skills

Security Operations

Incident Response

IT & Cloud Security Engineering

Automation & Scripting

Vulnerability Management

Execution Mindset

Communication

Clearance Eligibility

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

CrowdStrike

Google Workspace

Job description

Air is seeking a Security Engineer to help build and mature a security organization in Arlington, VA. You will lead and perform incident response, vulnerability management, and security engineering across endpoints, identities, cloud services, and on‑premise systems.

You will own runbooks, drive automation, and collaborate across IT and security teams to implement practical security controls and processes aligned with governance standards. This is an onsite, full‑time role with travel up to 10%.