Senior Security Engineer — Remote, Cloud & SIEM Expert

Gormat; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Job summary

Gormat is seeking a Senior Security Engineer to design, implement, and maintain enterprise security across on-prem and cloud environments. You will oversee security architecture, SIEM tooling, and automation, ensuring compliance with DoD 8140 and federal standards.

The role involves collaboration with IT Operations, SOC, Vulnerability Management, and Engineering to embed security into the SDLC, perform security testing, and drive threat detection and response improvements.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Data Science, Information Systems, Computer Science, or related field from ABET-accredited or CAE-designated institution.
• Minimum of six (6) years of experience in IT and/or Information Security.
• Must possess at least one DoD 8140 certification or obtain within six months of onboarding.
• Must maintain required DoD 8140 certifications.
• Must be able to successfully complete a DEA background investigation.
• Must possess an active Secret clearance (or higher) and be eligible to obtain a Top Secret clearance if required.
• Advanced certifications aligned with DCWF Roles 521, 461, 651, or 622 (e.g., CISSP-ISSAP, CCSP, CEH, GCIA, CySA+, etc.)
• Experience with SIEM platforms, scripting languages (Python, SPL, KQL), network security, and threat intelligence.
• Hands-on experience with Splunk, Elastic Search, and ServiceNow.
• Experience with APIs, webhooks, and data ingestion.

Responsibilities

• Provide architectural and design oversight for enterprise security requirements across systems.
• Serve as SME on enterprise security architecture and ensure designs meet mission and compliance requirements.
• Translate security goals into technical requirements for infrastructure and applications.
• Evaluate enterprise cybersecurity architecture effectiveness and recommend improvements.
• Oversee deployment, configuration, and management of security platforms (SIEM, IDS/IPS, EDR, SOAR, etc.).
• Implement security tools with emphasis on scalability and automation.
• Perform vulnerability scanning, analysis, and remediation tracking across teams.
• Collaborate with SOC and Incident Response teams to triage and mitigate threats.
• Develop content for SIEM/cyber defense platforms and create security dashboards.
• Build automated scripts/processes for monitoring, alerting, and remediation.
• Ensure system hardening, patch, and configuration management practices.
• Provide documentation, audit support, and compliance reporting to leadership.
• Integrate security into SDLC with developers and system architects.

Skills

Security architecture

SIEM expertise

Scripting: Python, SPL, KQL

Cloud security

DevOps & automation

DoD 8140 knowledge

Active Secret clearance

Education

Bachelor's degree in IT/Cybersecurity/related field

Tools

Splunk

Elastic Search

ServiceNow

Job description

Gormat is seeking a Senior Security Engineer to design, implement, and maintain enterprise security across on-prem and cloud environments. You will oversee security architecture, SIEM tooling, and automation, ensuring compliance with DoD 8140 and federal standards.

The role involves collaboration with IT Operations, SOC, Vulnerability Management, and Engineering to embed security into the SDLC, perform security testing, and drive threat detection and response improvements.