Senior Security Engineer

Tria Federal; Woodlawn (MD); On-site; USD 120,000 - 180,000; Full time

Job summary

Tria Federal is seeking a Senior Security Engineer to advance application modernization and maintain FedRAMP/ATO processes. You’ll work on security ops including monitoring, vulnerability management, and risk assessment across multiple projects, using tools like Nessus, Burp Suite, and Splunk.

The role requires a US clearance or eligibility, a strong background in NIST 800-53 controls, AWS security, and hands-on experience with security infrastructure and incident response.

Qualifications

• U.S. Federal Position of Trust clearance or ability to obtain one.
• Residency in the United States and the ability to work onsite in the DMV/Baltimore area.
• Bachelor’s degree in cybersecurity, CS, engineering or related field.
• Experience as a system or information security engineer with familiarity of NIST 800-53 and FedRAMP.

Responsibilities

• Engineer, implement, and monitor security measures for computer systems and networks.
• Define system security requirements and design secure architectures.
• Develop SOPs and protocols for security operations and incident response.
• Configure, troubleshoot, and maintain security infrastructure devices.
• Develop tools to mitigate vulnerabilities and automate repetitive tasks.
• Maintain ATO artifacts (SSP, CP, ISRA, PIA) and support ACT testing.

Skills

FedRAMP

AWS

NIST-800-53

Vulnerability mgmt

Incident response

Education

Bachelor's degree

Tools

Nessus

Burp Suite

ZAP

OWASP

Splunk

AppOmni

AWS

Job description

Who we are:

Tria Federal delivers digital services and technology solutions that support the health and safety of veterans, service members and civilians. For two decades, federal agencies have relied on Tria companies to advance their critical missions and modernize their systems, so that they can uphold their commitment to the American people. Today, we are pushing the boundaries of possibility through partnerships and investments in artificial intelligence and emerging technologies, developing solutions for the biggest challenges that government will face tomorrow.

We are proud to employ and support military veterans

Veterans, transitioning service members, and military spouses are strongly encouraged to apply.

Senior Security Engineer

Tria Federal is seeking a Senior Security Engineer to support our application modernization and transition efforts, as well as the development and maintenance of required federal program security documentation and processes.

In this role, you will be responsible for developing and maintaining security operations monitoring and management standard operating procedures (SOPs); monitoring and reporting vulnerabilities; and tracking, assessing, and reporting security risks. The successful candidate must have experience supporting Federal Risk and Authorization Management Program (FedRAMP) applications or systems and Authorization to Operate (ATO) processes.

Advanced technology or cybersecurity certifications such as the CISSP or relevant AWS certifications in solutions architecture, DevOps, or Security are highly preferred. Knowledge of and experience with Salesforce are also highly preferred.

As a Senior Security Engineer, you will be working on multiple projects facilitating security operations including Web Applications, Infrastructure Scanning / Auditing, Log Monitoring, and CDN Activity. Tria Federal utilizes industry standard tools and follows an Agile framework.

Requirements:

• Ability to obtain a U.S. Federal Position of Trust clearance designation.
• Must reside in and be able to perform work in the United States.
• Must have lived in the United States for 3 of the last 5 years.
• Bachelor’s degree in cybersecurity, computer science, engineering, technology, data science, statistics, analytics, or related quantitative and software development field.
• Candidates located in the DMV area are strongly encouraged to work onsite at our Baltimore-area office in Woodlawn, Maryland, once per week, typically on Tuesday or Thursday.
• Proven work experience as a system security engineer or information security engineer.
• Thorough knowledge of NIST 800-53 controls, ATO processes, and FedRAMP systems.
• Required to maintain ATO for systems and perform during annual Adaptive Capabilities Testing (ACT).
• Thorough understanding of the latest security principles, techniques, and protocols.
• Experience with Kali, Linux, and Windows Operating Systems.
• Knowledge of static and dynamic code testing.
• Experience in building and maintaining security systems.
• Detailed technical knowledge of database and operating system security.
• Hands on experience in security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc.
• Experience with network security and networking technologies and with system, security, and network monitoring tools.
• Familiarity with web related technologies (Web applications, Web Services, Service Oriented Architectures) and of network/web related protocols.
• Problem solving skills and ability to work under pressure in a fast-paced environment.
• Familiarity with Cloud Computing Platforms (AWS, Azure, Google).
• Proficiency with Nessus, Burp Suite, ZAP, and OWASP.
• Writing scripts with Python, Bash, and PowerShell.
• Experience with Splunk, AppOmni, and AWS
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent written and verbal communication skills.
• Must show appetite for active learning, embracing change and mentoring others in organization.

Responsibilities:

• Engineer, implement, and monitor security measures for the protection of computer systems, networks, and information.
• Identify and define system security requirements.
• Design computer security architecture and develop detailed cyber security designs.
• Prepare and document standard operating procedures and protocols.
• Configure and troubleshoot security infrastructure devices.
• Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
• Ensure that the company knows as much as possible, as quickly as possible about security incidents.
• Write comprehensive reports including assessment-based findings, outcomes, and propositions for further system security enhancement.
• Video documentation of Proof of Concept or Vulnerability Exploitation.
• Maintain ATOs and all security documentation, including, but not limited to: SSP, CP, ISRA, TableTop Exercises, and PIA
• Manage Splunk, AppOmni, and AWS integrations to completion

Preferred Certifications:

• AWS Security Certification
• Certified Authorization Professional (CAP)
• Certified Ethical Hacker (CEH)
• Certified Network Defense Architect (CNDA)
• Certified information Systems Security Professional (CISSP)

Why Tria?

What defines the Tria brand is more than just our dedication to excellence in our craft; it’s our incredible team of dedicated, talented, and passionate people that make Tria so exceptional. As people powering possible, we are all partners in our team’s shared success.

As a company that cares about people, we seek to cultivate a culture in which all can thrive personally and professionally. We offer a top-tier benefits package to invest in your physical, mental, and financial health and wellness so that you can be your best self - at work and in life. At Tria, we are growth-minded, entrepreneurial in spirit, and committed to fostering a culture of inclusion and opportunity for all. Whatever your background, your role, your department, or stage in your professional journey, here you will have opportunities to learn new skills, seize new challenges, and advance your career as we grow.

California Consumer Privacy Act (CCPA)

We are committed to protecting your privacy. As part of our compliance with the California Consumer Privacy Act (CCPA), we want to inform you about how we collect, use, and protect your personal information during the job application process. For more details, please review https://www.oag.ca.gov/privacy/ccpa.