Sr. Security Engineer

Tetra Tech; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision, life, STD, &L

PTO / 11 federal holidays

401(k) with company matching

Flexible Spending Accounts

Tuition Assistance

Charitable Contribution matching

Job summary

Halvik Corp in Washington, DC is seeking a senior cybersecurity professional to support a Federal SOC, covering threat monitoring, incident response, and secure cloud engineering in a hybrid environment.

Responsibilities include developing SOPs, vulnerability analysis, and integration of Zero Trust across Azure platforms. Requires 8+ years of experience and active Secret clearance, with Azure AKSRBAC and NIST/FedRAMP expertise.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS or related field.
• Minimum 8 years cybersecurity experience.
• Experience securing Azure cloud services including AKS, Azure Policy, Azure AD/Entra, Conditional Access, RBAC, Zero Trust.
• Ability to evaluate security docs and develop test plans/methodologies.
• Coordinate across cybersecurity teams and communicate to leadership.
• Ensure compliance with NIST, FISMA, FedRAMP guidance.
• Artifacts aligned with NIST SP 800-53 and FedRAMP baselines.
• CISSP or Security+ or equivalent certification.
• Azure-focused cloud architecture/engineering certification is a plus.
• Active Secret clearance is required.

Responsibilities

• Develop and maintain SOC SOPs and assessment processes.
• Ensure integrity, confidentiality, and protection of security data and processes.
• Perform vulnerability analysis and provide technical recommendations.
• Develop security evaluation plans and test procedures.
• Conduct hands-on security testing, analyze results, identify risks.
• Lead cloud security design and Azure implementation per compliance mandates.
• Integrate Zero Trust across Azure environments.
• Configure AKS, policy, RBAC, and governance controls.
• Brief leadership on security status and results.

Skills

Azure AKS

Azure Policy

Azure AD/Entra

Conditional Access

RBAC

Zero Trust

NIST/FISMA

Threat Analysis

Incident Response

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Azure Kubernetes Service (AKS)

Azure Policy

RBAC Administration

Job description

Halvik Corp delivers a wide range of services to 13 executive agencies and 15 independent agencies. Halvik is a highly successful WOB business with more than 50 prime contracts and 500+ professionals delivering Digital Services, Advanced Analytics, Artificial Intelligence/Machine Learning, Cyber Security and Cutting-Edge Technology across the US Government. Be a part of something special!

Position Overview

Halvik is seeking a candidate to provide technical and operational support for a Federal customer's Security Operations Center (SOC). The candidate will support enterprise security monitoring, incident response, and threat detection across a hybrid IT environment, including on-premises infrastructure and cloud services. This role provides advanced security analysis, and threat detection and engineering to strengthen organizational cybersecurity operations and continuous monitoring capabilities. The candidate will have hands-on experience with technical troubleshooting, remediation validation, incident follow-up, compliance reviews, platform administration, and operational security initiatives.

This role is on-site in Washington,DC.

Core Responsibilities

• Developing, enhancing, and maintaining Security Operations Center (SOC) standard operating procedures (SOPs) and assessment operations processes.
• Ensuring accountability, integrity, confidentiality, and protection of operational security processes and data.
• Performing vulnerability analysis, reviewing program-level documentation (system requirements, architectures, design documents, test plans, security plans), and providing technical recommendations.
• Developing and documenting security evaluation plans, test procedures, and assessment methodologies.
• Conducting hands-on security testing, analyzing results, identifying risk, and recommending countermeasures.
• Assessing and calculating risk based on identified threats, vulnerabilities, and security control weaknesses.
• Identifying and documenting mitigation strategies for threats, vulnerabilities, and deficiencies.
• Supporting the design, development, and implementation of security-related systems, tools, and assessment capabilities.
• Participating in or leading technical exchange meetings, documenting action items and outcomes, and briefing leadership on security engineering status and results.
• Supporting SOC alert analysis, triage, escalation, containment actions, and continuous improvement of detection and response use cases.
• Leading the engineering and implementation of secure cloud solutions – primarily in Microsoft Azure – in alignment with the organization's cybersecurity strategy and Federal compliance mandates (e.g., NIST, FISMA, FedRAMP).
• Integrating Zero Trust security principles across Azure cloud environments, including identity hardening, micro-segmentation, conditional access, and continuous monitoring.
• Configuring and operationalizing Azure cloud platform services including:
  • Azure Kubernetes Service (AKS) secure cluster configuration, governance, and node-pool hardening
  • Azure policy creation and enforcement
  • Secure Landing Zones following Azure enterprise-scale frameworks
  • Role-Based Access Control (RBAC) and least-privilege access models
  • Resource tagging, naming standards, and governance implementation

Minimum Requirements

• Education: Bachelor's degree in Cybersecurity, Information Technology, Computer Science or related field
• Experience: Minimum of 8 years of cybersecurity experience.
• Technical Proficiency: Demonstrated experience implementing and securing Azure cloud services including AKS, Azure Policy, Azure AD/Entra, Conditional Access, RBAC, and Zero Trust controls. Ability to evaluate security documentation and develop security test plans, evaluation methodologies, and technical recommendations. Ability to coordinate across cybersecurity teams and communicate technical information to leadership.
• Compliance: Ensure compliance with Federal cybersecurity regulations, including NIST, FISMA, and associated guidance. Ensure artifacts, assessments, and system configurations remain aligned with NIST SP 800-53 controls, FedRAMP baselines, Federal agency policy and directives.
• Certifications:
  • CISSP or equivalent Cybersecurity certification (e.g., Security+).
  • Cloud Architecture/Engineer or similar certification (Azure is a plus).
• Active Secret clearance is required.

Preferred Expertise

• Demonstrated success supporting Federal contracts.
• Strong background coordinating with stakeholders (e.g., system owners, ISSOs, architecture teams, and cybersecurity leadership) to validate cybersecurity requirements, address information assurance concerns, and resolve compliance or security issues.
• Strong analytical, written, and verbal communication skills, with the ability to translate technical risks and content into terms suitable for executive and government stakeholders.
• Ability to work collaboratively with others and contribute to a team environment.

Halvik offers a competitive full benefits package including:

• Company-supported medical, dental, vision, life, STD, and LTD insurance
• Benefits include 11 federal holidays and PTO
• Eligible employees may receive performance-based incentives in recognition of individual and/or team achievements.
• 401(k) with company matching
• Flexible Spending Accounts for commuter, medical, and dependent care expenses
• Tuition Assistance
• Charitable Contribution matching

Halvik Corp is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.

Halvik'spay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.