Security Tools Engineer Lead

RIVA Solutions, Inc.; Washington (District of Columbia); Hybrid; USD 140,000 - 171,000; Full time

Benefits offered by this job

Paid Time Off / Sick Leave

Health, Dental, and Vision Coverage

Life Insurance

401K with Company Matching

HSA/FSA Spending Accounts

Long- and Short-Term Disability

Pet Insurance

Wellness Program Initiatives

RIVA Flex

Additional Workplace Benefits

Job summary

RIVA Solutions, Inc. is seeking an experienced Security Tools Engineer Lead to manage ITA cybersecurity tools and lead threat detection, vulnerability management, and incident response across the enterprise. The role emphasizes secure configurations, tool tuning, and collaboration with ESOC to protect the ITA environment.

You will oversee Web Application Firewall policy refinement and contribute to AI platform security governance, reporting on security posture and tool performance.

Qualifications

• 7+ years in enterprise cybersecurity operations.
• Experience supporting security operations including threat detection, incident response, vulnerability assessment, and authenticated infrastructure and web app scanning.
• Managing enterprise cybersecurity tools (SIEM/EDR/Vulnerability mgmt) with configuration, tuning, monitoring, and support.
• Strong understanding of application and infrastructure security, including security control implementation.
• Ability to communicate security posture to technical and non-technical stakeholders.
• U.S. Citizenship and Secret Clearance.

Responsibilities

• Manage and sustain ITA cybersecurity tools, including user provisioning, access controls, configuration, tuning, and tool performance.
• Manage threat detection and response capabilities to protect the enterprise environment.
• Resolve security tool tickets involving functionality, access, configuration, and performance issues.
• Perform credentialed vulnerability scanning across all in-scope systems.
• Scan internet-facing and internal web apps for vulnerabilities.
• Conduct security reviews of new software before deployment and reassess updates.
• Tune Web Application Firewall rules and policies per ESOC guidance.
• Respond to ESOC incident response tickets per priorities.
• Support secure configuration, monitoring, access controls, data protection, and security controls for AI platforms.
• Integrate AI platform logging into enterprise security monitoring and detection of anomalies.
• Provide security input on AI configurations, data handling, access controls, governance.
• Produce regular reporting on tool capacity, performance, and overall security posture.
• Support contractual security tool availability and coordinate corrective actions.

Skills

Threat detection

Incident response

Vulnerability assessment

Security tooling

Tool administration

Tools

SIEM

EDR

Vulnerability management

Web application firewall

Job description

Title: Security Tools Engineer Lead

Location: Hybrid – Washington, D.C. Metro Area

Terms: Full-Time

Clearance: Secret clearance

Travel: 0–10%

RESULTS. INNOVATION. VALUES. ACCOUNTABILITY.

That’s RIVA. Our employee-first approach has cultivated a culture that attracts the best and brightest. By investing in people first and providing a flexible work environment, our employees experience higher morale, increased productivity, and lower turnover. At RIVA, people are our #1 priority.

Program Overview:

The International Trade Administration (ITA) Office of the Chief Information Officer (OCIO) Customer Relationship Division (CRD) supports the strategic delivery of digital solutions, enterprise services, and technology alignment across ITA’s global footprint. The CRD plays a critical role in improving customer engagement, optimizing business processes, and enhancing digital service offerings. This project advances ITA’s modernization initiatives by delivering program management, process reengineering, customer experience analysis, and technical documentation services to streamline enterprise IT support and align service delivery with mission goals.

As part of this effort, RIVA supports ITA OCIO in enhancing internal service delivery frameworks, implementing performance metrics, and ensuring the seamless execution of IT modernization initiatives through collaborative project execution, robust documentation, and stakeholder communication.

Position Overview:

RIVA Solutions is seeking an experienced Security Tools Engineer Lead to manage and sustain ITA cybersecurity tools and lead technical activities supporting enterprise threat detection, vulnerability management, application security, incident response, web security, and AI platform protection. This role ensures security tools are configured, monitored, tuned, and supported to maintain effective enterprise protection and reliable service delivery.

Core Responsibilities:

• Manage and sustain ITA cybersecurity tools, including user account provisioning, access controls, configuration, tuning, and ongoing tool performance.
• Manage threat detection and response capabilities needed to protect the enterprise environment.
• Resolve customer support tickets involving security tool functionality, access concerns, configuration requests, and performance issues in a timely and accurate manner.
• Perform credentialed enterprise vulnerability scanning across all in-scope systems capable of supporting authenticated scans.
• Perform vulnerability scanning of internet-facing and internal web applications to identify security weaknesses.
• Conduct security reviews of new software before introduction into the environment and reassess previously authorized software receiving new drivers or major version updates.
• Implement Web Application Firewall rule tuning and policy refinement in response to emerging threat patterns identified by the Enterprise Security Operations Center (ESOC).
• Respond to and resolve ESOC-related incident response tickets according to established priorities.
• Support secure configuration, monitoring, access restrictions, data protection, and ongoing security controls for approved AI platforms and services.
• Integrate AI platform logging and telemetry into enterprise security monitoring and support detection of anomalous, unauthorized, or unapproved AI tool usage.
• Provide technical security input on AI platform configurations, data handling, access controls, and enterprise AI governance objectives.
• Produce regular reporting on tool capacity, performance, and the overall enterprise security posture.
• Support the contractual security tool availability requirement and coordinate corrective action when service or performance issues arise.

Minimum Qualifications:

• At least 7 years of experience in enterprise cybersecurity operations or a related IT security role
• Proven experience supporting security operations, including threat detection, incident response, vulnerability assessment, and authenticated infrastructure and web application scanning.
• Demonstrated experience managing and optimizing enterprise cybersecurity tools, including SIEM, EDR, vulnerability management platforms, and web application firewalls, with responsibility for configuration, tuning, monitoring, troubleshooting, and technical support.
• Strong understanding of application and infrastructure security, including security impact reviews, change assessments, web application firewall policy management, and security control implementation to protect enterprise environments.
• Ability to communicate technical findings, service status, capacity, performance, and security posture to technical and non-technical stakeholders.
• U.S. Citizenship and Secret Clearance.

Preferred Qualifications:

• Experience supporting federal civilian cybersecurity programs or Department of Commerce environments.
• Experience securing, monitoring, or governing enterprise AI platforms.

Salary:

$155K (flexible depending on experience)

RIVA Benefits:

• Paid Time Off / Sick Leave
• Health, Dental, and Vision Coverage
• Life Insurance
• Retirement Benefits / 401K with Company Matching
• HSA/FSA Spending Accounts
• Long- and Short-Term Disability
• Pet Insurance
• Wellness Program Initiatives
• RIVA Flex
• Additional Workplace Benefits

RAVA Solutions is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any protected class. If you need a reasonable accommodation to search for a job opening or to submit an online application, please email [e-mail]. Only messages left for this purpose will be returned.