Senior Cyber Security Engineer - Cloud Defense & Compliance

Brown and Caldwell, Inc.; Alexandria (VA); On-site; USD 129,000 - 212,000; Full time

Job summary

Brown and Caldwell seeks a Senior Cyber Security Engineer to design, build, and support complex security solutions while driving compliance posture across frameworks and client requirements. This role tackles high-impact, ambiguous security problems with minimal oversight, partnering with technical teams and business stakeholders to focus on top risks.

You will monitor alerts, manage incidents, and remediate vulnerabilities across the environment, providing risk-based guidance for new technology

Qualifications

• Minimum 8 years of cyber security experience.
• Experience with incident and vulnerability management.
• Knowledge of SOC2 and CMMC frameworks.
• Ability to provide risk-based guidance for new technology initiatives.

Responsibilities

• Monitor and respond to security alerts and tickets with professional acuity.
• Develop, implement, and enforce security standards and guidelines for the company.
• Participate in the incident management process and coordinate with team members to respond to security events.
• Perform regular vulnerability assessments and recommend remediation strategies.
• Provide security requirements and guidance for new technology evaluations and implementations.
• Coordinate and manage legal discovery, holds, and client security questionnaires.

Skills

Information security principles

Data-driven decision making

Communication skills

Application security

Security automation

Incident management

Vulnerability management

Cloud security (Azure)

Education

Bachelor's degree in Computer Science/Cybersecurity/Information Systems

CISSP or Security+ or similar certifications

Tools

SIEM tooling

Automation scripting (PowerShell, Python)

Job description

Brown and Caldwell seeks a Senior Cyber Security Engineer to design, build, and support complex security solutions while driving compliance posture across frameworks and client requirements. This role tackles high-impact, ambiguous security problems with minimal oversight, partnering with technical teams and business stakeholders to focus on top risks.

You will monitor alerts, manage incidents, and remediate vulnerabilities across the environment, providing risk-based guidance for new technology