Security Operations Engineer – Senior

C3EL; Washington (Washington County); On-site; USD 140,000 - 190,000; Full time

Job summary

C3EL is seeking a Senior Security Operations Engineer to design, implement, and maintain secure systems in Washington, DC. The role provides technical leadership across security architecture, risk management, and continuous monitoring.

Responsibilities include vulnerability assessments, security control reviews, and incident response support, with hands-on use of SIEM, IDS/IPS, and endpoint protection tools. Requires US Citizenship and relevant certifications.

Qualifications

• U.S. Citizenship required.
• Current IAT Level III or IAM Level II certification (e.g., CISSP, CASP+ CE).
• 8+ years in cybersecurity or related field.
• Experience with RMF or NIST-based risk management.
• Experience with vulnerability assessment tools (e.g., Nessus).
• Knowledge of security architecture and network security.
• Experience with SIEM, IDS/IPS, and endpoint protection.
• Familiarity with Windows, Linux, and cloud environments (AWS/Azure).
• Strong analytical, troubleshooting, and communication skills.

Responsibilities

• Design, implement, and maintain cybersecurity solutions aligned with NIST/ISO 27001.
• Perform vulnerability assessments, security control reviews, and risk analyses.
• Monitor systems for security incidents and support incident response.
• Develop and enforce security policies, procedures, and best practices.
• Configure and manage security tools (SIEM, IDS/IPS, endpoint protection).
• Collaborate with engineering teams to integrate security controls into architectures.
• Conduct security audits and support continuous monitoring activities.
• Maintain security documentation including SSPs and risk tracking.
• Provide technical guidance to junior cybersecurity staff.

Skills

8+ years cybersecurity experience

Analytical communication

Python PowerShell scripting

Cloud environments (AWS/Azure)

Security architecture knowledge

Education

Bachelor’s in Cybersecurity/CS/IT

Associate’s degree +10 years experience

12 years recent specialized experience

Tools

SIEM

Nessus

IDS/IPS

Endpoint protection

Job description

CONTINGENT UPON CONTRACT AWARD

Overview:

Job Title: Security Operations Engineer - Senior

Location : Washington, DC

(Due to the nature of the work and contract requirements, U.S. Citizenship isrequired.)

Description:

C3EL is seeking a Senior Security Operations Engineer to support security initiatives in Washington, DC. This role is responsible for designing, implementing, and maintaining secure systems and ensuring the protection of organizational assets. The selected candidate will provide technical leadership across security architecture, risk management, and continuous monitoring efforts.

Responsibilities will include, but not be limited to:

• Design, implement, and maintain cybersecurity solutions aligned with industry frameworks (e.g., NIST, ISO 27001).
• Perform vulnerability assessments, security control reviews, and risk analyses.
• Monitor systems for security incidents and support incident response and remediation efforts.
• Develop and enforce security policies, procedures, and best practices.
• Configure and manage security tools (e.g., SIEM, IDS/IPS, endpoint protection).
• Collaborate with engineering teams to integrate security controls into system architectures.
• Conduct security audits and support continuous monitoring activities.
• Maintain security documentation, including system security plans and risk tracking.
• Provide technical guidance to junior cybersecurity staff.

Minimum Qualifications:

• U.S. Citizenship.
• Current IAT Level III or IAM Level II certification (e.g., CISSP, CASP+ CE, or equivalent).
• 8+ years of experience in cybersecurity, information security, or a related field.
• Experience with risk management frameworks (e.g., RMF, NIST-based approaches).
• Experience with vulnerability assessment tools (e.g., Nessus or similar).
• Knowledge of security architecture and network security principles.
• Experience with security tools such as SIEM, IDS/IPS, and endpoint protection.
• Familiarity with Windows, Linux, and cloud environments (AWS, Azure, or similar).
• Strong analytical, troubleshooting, and communication skills.

Desired Qualifications:

• Experience in enterprise environments.
• Familiarity with compliance and risk tracking tools.
• Experience with Zero Trust concepts.
• Scripting or automation experience (e.g., Python, PowerShell).
• Experience with DevSecOps or container security.

Education:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field preferred, OR an Associate’s degree plus ten (10) years of recent specialized experience, OR 12 years of recent specialized experience.