Sr. IT Security Engineer

Responsibilities

·       Enhance and automate security and compliance checks using scripting and available tools; evaluate emerging technologies, including AI capabilities, to improve security coverage and operational efficiency. Lead team efforts to integrate AI/ML-driven capabilities with the current security tools and operations to enhance and automate assessment and remediation

• Implement and maintain security controls for on-prem and cloud environments (AWS, GCP, Azure), ensuring compliance with FISMA, NIH policy, and federal security requirements.
• Integrate and optimize enterprise security and SIEM solutions (e.g., Splunk, Tenable) for continuous monitoring, event correlation, and compliance visibility in hybrid environments.
• Conduct threat modeling and security assessments of cloud deployments, identifying and mitigating vulnerabilities and supporting secure cloud migrations.
• Analyze vulnerability and assessment data to identify systemic risks, remediation trends, and opportunities for process or tool improvement, collaborating with system administrators and security teams for practical, risk-informed remediation.

Required Qualifications

• Extensive experience securing on-premises and cloud environments (AWS, GCP, Azure), with strong working knowledge of cloud security models, logging, tagging strategies, ephemeral resource tracking, and cross-platform operations; proven hands-on security engineering background in federal, regulated settings.
• 10+ years in securing information technology, plus 7+ years in hands-on security engineering built on a systems administration foundation including at least 3 years focused on cloud security and administration of Linux and Windows endpoints
• Familiarity with AI/ML integration in security tooling and operations, supporting modern approaches to threat detection and remediation.
• Admin or engineering-level experience with at least two security tools such as Tenable, Checkmarx, or Splunk, along with a strong understanding of vulnerability management, application security testing, and remediation workflows.

Bachelor’s degree in computer science, cybersecurity, information technology, or related technical field (or equivalent technical experience);