Sr. Security Engineer

INSPYR Solutions; Fulton (MD); Hybrid; USD 61,992 - 103,320; Full time

Job summary

INSPYR Solutions is seeking a Sr. Security Engineer to monitor security events and lead investigations in a hybrid environment across Fulton, MD and Raleigh, NC.

The role focuses on Kubernetes security, threat hunting, and incident response within a fast-paced SOC. You will analyze incidents, tune alerts, and collaborate with IT and engineering to improve security posture, while mentoring junior analysts and presenting weekly threat intelligence updates.

Qualifications

• 5+ years in a SOC or similar security role.
• Strong analytical and problem-solving skills.
• Proactive, takes ownership and works autonomously.
• Experience securing Kubernetes clusters and container workloads.
• Familiarity with cloud-native security tools and platforms.
• Knowledge of Kubernetes architecture, RBAC, network policies, and secrets management.
• Experience with security tooling: Splunk, Sentinel, CloudWatch/CloudTrail, EDR tools.
• Excellent written and verbal communication skills.

Responsibilities

• Monitor security alerts and events using SIEM and monitoring tools.
• Analyze and triage escalated security incidents; conduct in-depth investigations.
• Respond to and contain security incidents with proper escalation.
• Perform root cause analysis and recommend mitigations.
• Support threat hunting and proactive risk identification.
• Develop and tune correlation rules, alerts, and dashboards.
• Monitor Kubernetes and container workloads for misconfigurations and threats.
• Collaborate with DevOps to improve security of Kubernetes clusters.
• Document incidents and investigations in ticketing systems.
• Mentor Tier 1 analysts on complex investigations.
• Present intelligence on cyber threats and best practices weekly or bi-weekly.

Skills

Security Operations

SIEM

Kubernetes security

Incident response

Threat hunting

Python scripting

Cloud security

Education

Bachelor's degree in Computer Science or related field

Security certifications (CKS/CKA, etc)

Tools

Falco

Kubescape

Trivy

Aqua Security

Prisma Cloud

Wiz Kubernetes Security

Splunk

Microsoft Sentinel

AWS CloudWatch

AWS CloudTrail

Tenable

Microsoft Defender for Endpoint

Azure Defender for Cloud

Kubernetes (EKS/AKS)

Google Cloud Security (if applicable)

Job description

Title: Sr. Security Engineer

Location: Fulton, MD (HYBRID) or Raleigh, NC (HYBRID)

Duration: Initial 12-month contract with extensions

Compensation: $69/hour - $75/hour

Work Requirements: US Citizen, GC Holders or Authorized to Work in the U.S.

Sr. Security Engineer

Key Responsibilities

• Monitor security alerts and events using SIEM and security monitoring tools.
• Analyze and triage escalated security incidents; conduct in-depth investigations.
• Respond to and contain security incidents, ensuring proper escalation when necessary.
• Perform root cause analysis and recommend mitigation strategies.
• Support threat hunting activities and proactive identification of risks.
• Develop and tune correlation rules, alerts, and dashboards.
• Monitor and investigate security events in Kubernetes and containerized environments, identifying misconfigurations, suspicious activity, and potential threats.
• Collaborate with infrastructure and DevOps teams to improve the security posture of Kubernetes clusters and container workloads.
• Document incidents, investigations, and recommendations in ticketing systems.
• Collaborate with IT, engineering, and business units to ensure security best practices.
• Mentor and assist Tier 1 analysts with complex investigations.
• Serve as a subject matter expert by investigating and presenting intelligence on the latest cyber threats, vulnerabilities, and industry best practices weekly or bi-weekly.

Required Skills & Experience

• 5+ years of experience in a Security Operations Center or similar security role.
• Strong analytical and problem-solving skills.
• Proactively identify tasks and take ownership to ensure their completion.
• Demonstrate initiative and the capability to work autonomously with minimal supervision.
• Experience securing and monitoring Kubernetes clusters and containerized workloads.
• Understanding of Kubernetes architecture, including pods, namespaces, services, RBAC, network policies, and secrets management.
• Experience with Kubernetes security tools such as Falco, Kubescape, Trivy, Aqua Security, Prisma Cloud, or Wiz Kubernetes Security is a plus.
• Experience with the following tools/platforms:
  • Cloud Security: Wiz, Azure Defender for Cloud, AWS Security Hub, related cloud-native security tools
  • Container & Kubernetes Security: Kubernetes, Amazon EKS, Azure AKS, container runtime security, image scanning, admission controllers
  • Vulnerability Management: Tenable
  • SIEM & Monitoring: Splunk, Microsoft Sentinel, Amazon CloudWatch, AWS CloudTrail
  • EDR & Threat Protection: Microsoft Defender for Cloud, Microsoft Defender for Endpoint, Cisco AMP
  • Identity & Access: Microsoft Defender for Identity, Azure Active Directory
  • Data Loss Prevention: Code42, O365 DLP
• Familiarity with Microsoft 365 security and Azure security controls.
• Experience with AWS security tools and controls.
• Knowledge of TCP/IP, network protocols, and common attack vectors.
• Ability to interpret and analyze log data from various sources, including Kubernetes audit logs and container runtime logs.
• Understanding of incident response methodologies and frameworks (e.g., NIST, SANS).
• Knowledge of vulnerability management processes and remediation.
• Experience with scripting (Python) for automation and investigation is a plus.
• Excellent written and verbal communication skills.
• Ability to work in a fast-paced, 5x8 SOC environment.

Preferred Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience.
• Relevant certifications (e.g., Security+, CEH, GCIA, GCIH, Azure Security Engineer, AWS Security Specialty, Certified Kubernetes Security Specialist (CKS)or Certified Kubernetes Administrator (CKA)).
• Experience with threat intelligence platforms (TIPs).
• Familiarity with regulatory frameworks (e.g., FedRAMP, GDPR, HIPAA, PCI-DSS, MITRE ATT&CK).
• Experience with SOAR platforms for orchestration and automation.
• Experience securing cloud-native applications, Kubernetes platforms (EKS, AKS), and containerized CI/CD pipelines.

About INSPYR Solutions

Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients’ business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.

INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, INSPYR Solutions complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities.

Information collected and processed through your application with INSPYR Solutions (including any job applications you choose to submit) is subject to INSPYR Solutions’ Privacy Policy and INSPYR Solutions’ AI and Automated Employment Decision Tool Policy: https://www.inspyrsolutions.com/policies/. By submitting an application, you are consenting to being contacted by INSPYR Solutions through phone, email, or text.