Senior Security Engineer

Command Post Technologies, Inc.; Orlando, Northern (FL, KY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Great health benefits

401k with matching

ESOP

Tuition reimbursement

Flexible hours

Work/Life balance

Paid Time Off

Parental Leave

Leadership training

Job summary

Command Post Technologies, Inc. (CPT) seeks a Senior Security Engineer to support the NCRC RM program with senior-level development, testing, and security support for designated product scrum teams.

The role emphasizes vulnerability management, governance, risk & compliance, and security architecture, requiring DoD RMF knowledge, scripting, Linux/Windows experience, and familiarity with SIEM/EDR, firewalls, IAM, and CI/CD practices.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field
• Strong understanding of network protocols, security architecture, and security practices
• Experience with Linux-based and Windows-based systems
• Proficient in scripting (Python, PowerShell, Bash)
• Experience with automation tools (Ansible, Terraform, Chef, Puppet)
• Understanding of CI/CD and modern threat landscapes
• Familiarity with NIST 800-53, NIST 800-171, SOC 2 and ISO 27001
• Ability to write clear cybersecurity guidance and documentation
• Security+ certification

Responsibilities

• Implement patching procedures for Linux, Windows, VMware, and Cisco
• Run and review vulnerability scans and STIGs
• Prioritize vulnerability remediation across endpoints, networks, and applications
• Automate patching processes for Linux/Windows
• Secure and harden hardware and software systems
• Support POA&M tracking and policy development
• Advise on securing DoD networks and create data flow diagrams
• Participate in Agile/Scrum processes

Skills

Python scripting

PowerShell

Bash

Linux

Windows

Security engineering

Vulnerability management

Ansible

Terraform

Puppet

Chef

SIEM/EDR

Network security

NIST 800-53/800-171

Education

BS in Cybersecurity/CS/IT

Tools

Tenable Nessus

ACAS

Tenable Security Center

VMware

SIEM

Job description

Description

This position is for the NCRC Range Modernization (RM) Senior Security Engineer position providing senior-level development, testing, and security support associated with their designated NCRC product scrum teams.

Responsibilities

Vulnerability Management:

• 1. Implement patching procedures for multiple Operating Systems (Linux, Windows, VMware, Cisco)
• 2. Run and review vulnerability scans and STIGs
• 3. Prioritize vulnerability remediation efforts across endpoints, networks, and applications
• 4. Automate patching process for multiple Operating Systems (Linux/Windows)
• 5. Responsible for securing and hardening hardware and software systems.

Governance, Risk & Compliance:

• 1. Support tracking, resolution, and milestones for the program's Plan of Action and Milestones (POA&M) items
• 2. Develop and maintain security policies, procedures, and standards
• 3. Ensure compliance with relevant standards, directives, and regulations
• 4. Conduct risk assessments and support audit activities
• 5. Remain abreast of emerging technologies, cyber threats, and security tools

Security Architecture & Engineering

• 1. Design, implement, and manage security solutions (e.g., SIEM, EDR, firewalls, IDS/IPS, IAM, VPN)
• 2. Evaluate and integrate new security technologies and tools

• Advise ISSO and ISSM on issues related to securing and monitoring classified DoD networks
• Creation and maintenance of data flow and system boundary diagrams
• Agile/Scrum process

Requirements

• Must be a U.S. citizen and have an active security clearance
• Bachelor’s (BS) degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience)
• Strong understanding of network protocols, security architecture, and security practices
• Experience with Linux-based and Windows-based systems
• Proficient in scripting (e.g., Python, PowerShell, Bash)
• Experience with automation tools (e.g., Ansible, Terraform, Chef, Puppet)
• Understanding of CI/CD
• In-depth knowledge of modern threat landscapes, vulnerabilities, mitigation techniques, and security tools and processes
• Familiarity with NIST 800-53, NIST 800-171, SOC 2 and/or ISO 27001
• Ability to write clear and concise cybersecurity guidance, procedures, and documentation
• Security+ Certified

Preferred Skills and Experience

• DoD RMF security practices and regulations
• Virtualization (preferably VMware)
• Familiarity with open-source security tools
• Familiarity with ACAS, Tenable Security Center, and Tenable Nessus

About us

We are Command Post Technologies, Inc. (CPT). CPT is a Service-Disabled, Veteran-Owned Small Business (SDVOSB), providing engineering services in the areas of Cyber Security, Software Development, Test & Evaluation, and Strategic Planning. CPT employees appreciate working in a caring environment that promotes a healthy work-life balance. As individuals, we come together as a team, supporting a culture rooted in our core principles of integrity, determination, and innovation. In all of CPT’s collaboration efforts, our team prioritizes communication, accountability, and being resourceful in order to maximize efficiency and results.

What's In It for You

• Great health benefits (for more info contact us directly)
• Leadership training
• 401k with generous company matching
• Employee Stock Ownership Plan (ESOP)
• Career professional development
• Tuition reimbursement
• Flexible hours
• Work/Life balance
• Rewards and recognition
• Paid Time Off
• Parental Leave

Command Post Technologies, Inc. (CPT) is a Service-Disabled Veteran-Owned Small Business (SDVOSB) founded in 2008 and headquartered in Suffolk, VA, with personnel in various states including Virginia, Maryland, Florida, and Texas. With 2/3 of our staff being former military, CPT firmly believes in employing veterans. Command Post Technologies, Inc. is a unique provider of innovative solutions that enhance our corporate clients’ productivity and empower our government clients with the ability to protect against all enemies: foreign and domestic. CPT adapts its successful military experiential approach to the needs of leaders in a global business environment and provides an elite leadership curriculum that results in a world-class, leadership-altering event.

Command Post Technologies Inc. (CPT) is an Equal Employment Opportunity and Affirmative Action employer.

We consider applicants without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sex, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, or membership in any other group protected by federal, state, or local law.

We take Affirmative Action to ensure equal opportunities for employees and potential employees without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sex, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, or membership in any other group protected by federal, state, or local law.

We abide by the Pay Transparency Nondiscrimination Provision and will refrain from discharging or otherwise discriminating against employees or applicants who inquire about, discuss, or disclose their compensation or the compensation of other employees or applicants.

An exception exists where the employee or applicant makes the disclosure based on information obtained while performing his or her essential job functions.