Senior Security Engineer – Cloud, Compliance & IR

Brown and Caldwell, Inc.; Alexandria (VA); On-site; USD 129,000 - 212,000; Full time

Benefits offered by this job

Medical/Dental/Vision

Disability insurance

Life insurance

401(k) with company match

Parental leave

Paid holidays

Tuition reimbursement

Employee assistance program

Pet insurance

Long-term care insurance

Job summary

Brown and Caldwell, Inc. is seeking a Senior Cyber Security Engineer to design, build, and support advanced security solutions while strengthening the organization’s compliance posture.

The role involves addressing high-impact security challenges with minimal supervision and guiding new technology initiatives through a security-first lens. You will work with technical teams to manage incidents, vulnerabilities, and access controls.

Qualifications

• Minimum 8 years of cyber security experience.
• Experience with incident and vulnerability management and security guidance.
• Relevant governance/compliance certifications preferred (CISSP, CISA, CRISC).
• Hands-on compliance or audit-support experience.
• Experience with AI-security considerations is a plus.

Responsibilities

• Provide support on complex security issues and questions.
• Automate security tasks and improve processes.
• Investigate, monitor, and respond to alerts and incidents.
• Conduct risk assessments and remediation for vulnerabilities.
• Promote zero-trust and least-privilege access; conduct access reviews.

Skills

Security principles

Data-driven decisions

Strong communication

Application security

Azure security

Education

CS/Cybersecurity degree or related

CISSP / CISA / CRISC preferred

Tools

SIEM

Cloud security tools

Job description

Brown and Caldwell, Inc. is seeking a Senior Cyber Security Engineer to design, build, and support advanced security solutions while strengthening the organization’s compliance posture.

The role involves addressing high-impact security challenges with minimal supervision and guiding new technology initiatives through a security-first lens. You will work with technical teams to manage incidents, vulnerabilities, and access controls.