Senior Security Engineer

Peyton Resource Group; Bethesda (MD); On-site; USD 130,000 - 180,000; Full time

Job summary

Peyton Resource Group is seeking a Senior Security Engineer to join a multidisciplinary cybersecurity team supporting mission-critical systems in a regulated federal environment. You will implement and optimize security controls across on‑prem and multi‑cloud environments while ensuring compliance with FISMA, NIST 800‑53, FedRAMP, and RMF.

The ideal candidate has 10+ years in information security, 3+ years cloud security, strong Linux/Windows administration, and experience with Splunk, Tenable,

Qualifications

• 10+ years of information security experience, including 7+ years in hands‑on security engineering roles.
• Minimum 3 years of experience securing cloud environments (AWS, Azure, and/or GCP).
• Strong background in Linux and Windows administration with a foundation in systems engineering or systems administration.
• Experience implementing security controls in hybrid cloud and on‑premises environments.
• Working knowledge of federal security frameworks including FISMA, NIST 800‑53, FedRAMP, RMF, ATO, and POA&M processes.
• Experience with enterprise security tools such as Splunk, Tenable, Checkmarx, or similar technologies.
• Understanding of vulnerability management, application security testing, remediation workflows, identity and access management, encryption, and centralized logging.
• Experience utilizing scripting or automation tools such as PowerShell, Python, Bash, or APIs.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience).
• CISSP certification or ability to obtain within six months of hire.
• Excellent communication and collaboration skills with both technical and non‑technical stakeholders.

Responsibilities

• Implement and maintain security controls across on‑premises and cloud platforms (AWS, Azure, GCP).
• Support compliance initiatives related to FISMA, NIST 800‑53, FedRAMP, RMF, ATOs, and POA&M management.
• Enhance and automate security assessments, compliance monitoring, and remediation activities.
• Evaluate and integrate AI/ML and LLM‑based capabilities to improve threat detection and remediation.
• Administer and optimize security technologies such as SIEM, vulnerability management, and centralized logging platforms.
• Support security monitoring, event correlation, incident investigation, and continuous compliance reporting (Splunk/Tenable).
• Conduct cloud security reviews, threat modeling, and vulnerability assessments for deployments.
• Collaborate with system admins, developers, and infra teams to remediate security risks.
• Provide security guidance across server, workstation, network, and cloud environments.
• Develop and maintain security documentation, procedures, standards, and operational guidance.

Skills

Cloud security

Vulnerability management

SIEM operations

Application security

AI-driven security

Automation scripting

Communication

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field

CISSP certification

Master's degree in Cybersecurity, CS, IT

Tools

Splunk

Tenable

Checkmarx

Docker

Kubernetes

PowerShell

Python

Bash

Job description

We are seeking a highly skilled Senior Security Engineer to join a multi-disciplinary cybersecurity team supporting mission-critical systems in a regulated federal environment. This hands‑on role focuses on implementing and optimizing security controls across on‑premises and multi‑cloud environments while ensuring compliance with federal cybersecurity frameworks, including FISMA, NIST 800‑53, FedRAMP, and RMF.

The ideal candidate brings deep security engineering expertise built upon a strong systems administration background and has experience with cloud security, vulnerability management, SIEM operations, application security, and emerging AI‑driven security technologies. This position works closely with infrastructure, network, and enterprise security teams to strengthen the organization's overall security posture and support secure cloud adoption initiatives.

Key Responsibilities

• Implement and maintain security controls across on‑premises and cloud platforms, including AWS, Azure, and GCP.
• Support compliance initiatives related to FISMA, NIST 800‑53, FedRAMP, RMF, ATOs, and POA&M management.
• Enhance and automate security assessments, compliance monitoring, and remediation activities through scripting and available security tools.
• Evaluate and integrate AI/ML and LLM‑based capabilities to improve threat detection, assessment, remediation, and operational efficiency.
• Administer and optimize security technologies such as SIEM, vulnerability management, application security, and centralized logging platforms.
• Support security monitoring, event correlation, incident investigation, and continuous compliance reporting using tools such as Splunk and Tenable.
• Conduct cloud security reviews, threat modeling, and vulnerability assessments to support secure deployments and cloud migrations.
• Collaborate with system administrators, developers, and infrastructure teams to identify and remediate security risks.
• Provide security guidance, best practices, and technical recommendations across server, workstation, network, and cloud environments.
• Develop and maintain security documentation, procedures, standards, and operational guidance.

Required Qualifications

• 10+ years of information security experience, including 7+ years in hands‑on security engineering roles.
• Minimum 3 years of experience securing cloud environments (AWS, Azure, and/or GCP).
• Strong background in Linux and Windows administration with a foundation in systems engineering or systems administration.
• Experience implementing security controls in hybrid cloud and on‑premises environments.
• Working knowledge of federal security frameworks including FISMA, NIST 800‑53, FedRAMP, RMF, ATO, and POA&M processes.
• Experience with enterprise security tools such as Splunk, Tenable, Checkmarx, or similar technologies.
• Understanding of vulnerability management, application security testing, remediation workflows, identity and access management, encryption, and centralized logging.
• Experience utilizing scripting or automation tools such as PowerShell, Python, Bash, or APIs.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience).
• CISSP certification or ability to obtain within six months of hire.
• Excellent communication and collaboration skills with both technical and non‑technical stakeholders.

Preferred Qualifications

• Experience integrating AI/ML capabilities into cybersecurity operations and automation workflows.
• Hands‑on experience with Splunk engineering, SIEM administration, security analytics, and event correlation.
• Cloud security certifications such as AWS Security Specialty, Azure Security Engineer Associate, or Google Professional Cloud Security Engineer.
• Experience securing containerized environments, including Docker and Kubernetes.
• Advanced Linux and Windows administration expertise.
• Master's degree in Cybersecurity, Computer Science, Information Technology, or a related technical discipline.

What You'll Bring

• A proactive, hands‑on approach to solving complex security challenges.
• Ability to balance security, compliance, and operational requirements in fast‑paced environments.
• Strong analytical skills with the ability to identify systemic risks and drive practical remediation strategies.
• Passion for leveraging emerging technologies, including AI‑driven security solutions, to enhance organizational security.

Join us in protecting critical systems, enabling secure cloud adoption, and advancing cybersecurity capabilities through innovation, automation, and continuous improvement.