Senior Security Engineer New

Triafed; Northern (KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Tria Federal is seeking a Senior Security Engineer to support transition and maintenance of federal security programs. You will handle security operations, monitoring, vulnerability reporting, and FedRAMP/ATO processes while collaborating with Agile teams.

Remote work is offered across the United States with occasional travel to offices. Ideal candidates have CISSP, AWS, and governance experience, plus familiarity with Nessus, Burp Suite, OWASP, and Python scripting.

Qualifications

• Bachelor’s degree in cybersecurity, computer science, engineering, technology, data science, statistics, analytics, or related field.
• CISSP certification required; experience with FedRAMP and ATO processes preferred.
• Experience with Nessus, Burp Suite, ZAP, and OWASP security practices.

Responsibilities

• Engineer, implement, and monitor security measures for computer systems, networks, and information.
• Identify and define system security requirements and design secure architectures.
• Prepare SOPs and protocols; document security processes and run books.
• Manage Splunk, AppOmni, and AWS integrations to completion.

Skills

CISSP

FedRAMP

AWS

Python

PowerShell

Splunk

Kali Linux

NIST 800-53

Vulnerability mgmt

Education

Bachelor’s degree in cybersecurity

Tools

Nessus

Burp Suite

OWASP

ZAP

AppOmni

AWS

Azure

Google Cloud

Job description

Careers Careers

Jobs

Join a team that puts people first.

At Tria, we are a dynamic professional community driven by a mission rooted in service to colleagues, customers, and community.

Senior Security Engineer

Remote

Who we are:

Tria Federal delivers digital services and technology solutions that support the health and safety of veterans, service members and civilians. For two decades, federal agencies have relied on Tria companies to advance their critical missions and modernize their systems, so that they can uphold their commitment to the American people. Today, we are pushing the boundaries of possibility through partnerships and investments in artificial intelligence and emerging technologies, developing solutions for the biggest challenges that government will face tomorrow.

We are proud to employ and support military veterans who bring mission-first mindset, technical expertise, and leadership qualities that strengthen our work. Veterans, transitioning service members, and military spouses are strongly encouraged to apply.

Senior Security Engineer

Softrams, a Tria Federal company, prides itself in leading the charge for innovation and transformation in the federal government space. We offertechnologicalimplementations and build customer‑centric services that are simple, intuitive, and usable across multiple industries. By partnering with federal agencies, our specialized digital services are reimagining and reshaping the digital landscape to bring positive change for millions of Americans.

Softrams,acquiredin November 2024, forms the core of Tria Federal’s new Public Health business unit. Tria Federal (Tria)deliversmission‑critical technicalexpertiseand digital services informed by deep customerexpertiseto Health and Public Safety agencies across the federal sector.

At Tria, we are a dynamic professional community driven by a mission rooted in service to colleagues, customers, andthecommunity. Tria invests in its employees with a top‑tier benefits package to support their physical, mental, and financialwell‑being.

Job Description:

Tria Federal is seeking aSenior Security Engineer that supports transition and maintenance of required federal program security documentation and security processes. As a Senior Security Engineer, you willbe responsible forSecurity Operations Monitoring and Management SOPs, vulnerabilitymonitoringand reporting, security risk tracking, assessment, and reporting. The CISSP with experience on FedRAMP applications and ATO processes isrequired.AWScertification and security experience from multiple AWS projects is highly preferred.Knowledge and experiencing utilizing Salesforce is highly preferred.

As a Senior Security Engineer, you will be working on multiple projectsfacilitatingsecurity operations including Web Applications, Infrastructure Scanning / Auditing, Log Monitoring, and CDN Activity.Tria Federalutilizesindustry standard tools and follows an Agile framework.

Requirements:

• Ability to obtain a U.S. Federal Position of Trust clearance designation.
• Must reside in and be able to perform work in the United States.
• Must have lived in the United States for 3 of the last 5 years.
• Bachelor’s degree incybersecurity,computer science, engineering,technology,data science, statistics, analytics, or related quantitative and software development field.
• Candidatein the DMV area willbe requiredto travel to our Baltimore office (Woodlawn MD) once a week (Tuesday).
• Proven work experience as a system security engineer or information security engineer.
• Thorough knowledge of NIST 800-53 controls, ATO processes, and FedRAMP systems.
• Required to maintain ATO for systems and perform during annual Adaptive Capabilities Testing (ACT).
• Thorough understanding of the latest security principles, techniques, and protocols.
• Experience with Kali, Linux, and Windows Operating Systems.
• Knowledge of static and dynamic code testing.
• Experience in building and maintaining security systems.
• Detailed technical knowledge of database and operating system security.
• Hands on experience in security systems, including firewalls, intrusion detection systems, anti‑virus software, authentication systems, log management, content filtering, etc.
• Experience with network security and networking technologies and with system, security, and network monitoring tools.
• Familiarity with web related technologies (Web applications, Web Services, Service Oriented Architectures) and of network/web related protocols.
• Problem solving skills and ability to work under pressure in a fast‑paced environment.
• Experiencing utilizing Salesforce is highly preferred.
• Familiarity with Cloud Computing Platforms (AWS, Azure, Google).
• Proficiencywith Nessus, Burp Suite, ZAP, and OWASP.
• Writing scripts with Python, Bash, and PowerShell.
• Experience with Splunk,AppOmni, and AWS
• Strong analytical, troubleshooting, and problem‑solving skills.
• Excellent written and verbal communication skills.
• Must show appetite for active learning, embracing change and mentoring others in organization.

Responsibilities:

• Engineer, implement, and monitor security measures for the protection of computer systems, networks, and information.
• Identifyand define system security requirements.
• Design computer security architecture and develop detailed cyber security designs.
• Prepare and document standard operating procedures and protocols.
• Configure and troubleshoot security infrastructure devices.
• Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
• Ensure that the company knows as much as possible, as quickly as possible about security incidents.
• Writecomprehensive reports including assessment‑based findings, outcomes, and propositions for further system security enhancement.
• Video documentation of Proof of Concept or Vulnerability Exploitation.
• Maintain ATOs and all security documentation, including, but not limited to: SSP, CP, ISRA, TableTopExercises, and PIA
• Manage Splunk, AppOmni, and AWS integrations to completion

Must Have Certifications:

• CISSP

PreferredCertifications:

• AWS Security Certification
• Certified Authorization Professional (CAP)
• Certified Ethical Hacker (CEH)
• Certified Network Defense Architect (CNDA)

Public Trust Clearance:

Many of our roles require the hired candidate to go through public trust clearance. A minimum of 3 years of stay in the U.S. within the last 5 yearsis required tobe eligible to qualify for public trust clearance sponsorship.

Work Location:

Headquarteredin Arlington, VA, we also have a primary office in Baltimore, MD for those who prefer to work on‑site. However, with employees spread across 40+ states, we have many remote roles.

EEO Statement:

Softrams, a Tria Federal Company, is an affirmative action and equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. Softrams is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation, or toparticipatein the job application or interview process, contact the Talent Acquisition Team at [e-mail]

Know your rights poster: https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12ScreenRdr.pdf

Why Tria?
What defines the Tria brand is more than just our dedication to excellence in our craft; it’s our incredible team of dedicated, talented, and passionate people that make Tria so exceptional. As people powering possible, we are all partners in our team’s shared success.

As a company that cares about people, we seek to cultivate a culture in which all can thrive personallyandprofessionally. We offer a top‑tier benefits package to invest in your physical, mental, and financial health and wellness so that you can be your best self - at workand in life. At Tria, we are growth‑minded, entrepreneurial in spirit, and committed to fostering a culture of inclusion and opportunity for all. Whatever your background, your role, your department, or stage in your professional journey, here you will have opportunities to learn new skills, seize new challenges, and advance your career as we grow.

California Consumer Privacy Act (CCPA)

We are committed to protecting your privacy. As part of our compliance with the California Consumer Privacy Act (CCPA), we want to inform you about how we collect, use, and protect your personal information during the job application process. For more details, please review https://www.oag.ca.gov/privacy/ccpa .