Senior Security Engineer

Team: Delivery- Federal

Location: Arlington, VA

Workplace Type: hybrid

What You'll Do:

-Investigate, validate, prioritize, and remediate vulnerabilities across endpoints, servers, cloud services, and applications.

-Produce clear, risk-based summaries of security assessment results and contribute to actionable reporting.

-Assist in selecting and applying appropriate information security controls in coordination with system engineers, architects, and other technical stakeholders.

-Support incident handling and response, digital forensics, threat detection, and vulnerability management processes.

-Use SIEM, SOAR, EDR, cloud services, and Microsoft enterprise technologies including O365, Azure, Defender, and Entra.

-Contribute to security planning, assessments, risk analysis, risk management, certification, and awareness activities for systems and networks.

-Analyze security issues and help develop effective remediation strategies.

-Communicate security concepts, risks, and recommendations to technical and non-technical audiences.

-Assist with vulnerability remediation and coordinate with teams to ensure timely resolution.

-Help optimize the Microsoft Defender suite, including Defender for Endpoint, Defender for Cloud, Defender for Identity, and Defender for Office 365.

-Assist with Microsoft Purview capabilities, including data classification, sensitivity labels, Data Loss Prevention, and eDiscovery workflows.

-Write and tune Kusto Query Language (KQL) queries in Microsoft Sentinel, Defender, and Log Analytics to aid detection and investigation.

-Contribute to the review and improvement of security controls using findings from assessments and red or blue team engagements.

-Help develop clear guidance and documentation for security controls, compliance requirements, and governance in the Microsoft cloud environment.

What You've Done:

-Ability to attain DHS EOD.

-BA and 10 years of experience, or AA and 12 years of experience(per contract requirements).

-Active Security+ CE certification.

-Demonstrated experience regarding Conditional Access Policies (CAPs), Azure AD/Entra, and Zero Trust principles.

-Experience in one or more of the following areas: incident response, digital forensics, vulnerability management, identity and access management, threat detection, or security engineering.

-Exposure to cybersecurity assessments such as vulnerability assessments, threat assessments, application security, or infrastructure security.

-Familiarity with Cyber and NIST policy, Risk Management Framework, and the implementation of security mitigations.

-Strong analytical and problem-solving skills with a focus on optimizing security workflows.

-Professional, customer-oriented, and calm under pressure.

-Effective written and verbal communication skills across stakeholder levels.