Cybersecurity Engineer

Career Listings•Chantilly, VA

3d•$140,000 - $160,000•Onsite

About The Position

SarelaTech is seeking a Cybersecurity Engineer to provide integrated cybersecurity and systems engineering support for cloud collaboration services delivered to DoW customers. The role designs and sustains secure architectures for Azure-hosted workloads, implements and automates cloud security controls, and coordinates incident response activities with DISA and program stakeholders. The engineer uses consultative approaches to identify security and operational needs, anticipate threats, and deliver secure solutions that protect DoW information and support mission availability. The position is 100% onsite in Chantilly, Virginia. No travel costs will be provided.

Requirements

Bachelor’s degree; an additional four years of experience may be substituted in lieu of the degree.
Active Secret security clearance.
Current 8570 IAT Level II certification, such as Security+ CE, CCNA Security, CySA+, GICSP, GSEC, or SSCP.
At least six years of related experience.
Experience as a security engineer or systems engineer supporting DoW or DISA programs, including hands-on work with production systems.
Azure experience, including deploying and managing Azure Virtual Machines, implementing secure configurations, patching and monitoring, and developing or operating Azure Automation Runbooks.
Experience with RMF/ATO processes, including DoW RMF, DoD CC SRG, DISA STIGs, vulnerability scanning, and associated documentation.
Experience participating in or coordinating incident response for complex systems, including triage, containment, eradication, recovery, and lessons learned.
Strong consultative communication skills and the ability to explain complex security and systems engineering topics to technical and non-technical stakeholders.

Nice To Haves

DoW 8570/8140 baseline certification at the appropriate level, such as CISM, CASP+, CISSP, or equivalent.
Microsoft Azure certifications, such as AZ-104, AZ-500, or AZ-700, and/or Microsoft 365 security or collaboration experience relevant to DEOS.
Prior experience on DISA or enterprise DoW collaboration or cloud programs.
Experience working with large, distributed operations teams and SOCs in a 24x7 mission environment.

Responsibilities

Design, document, and maintain secure architectures for services hosted in Azure and related environments, including NSGs and Azure VMs supporting M365, management, monitoring, or integration services.
Build, configure, and administer Azure Virtual Machines, including operating-system hardening using DISA STIGs/SRGs, patching, baseline configuration, and performance tuning.
Develop, maintain, and operate Azure Automation Runbooks for secure operations and compliance, such as automated patching, configuration enforcement, log collection, backup and restore, and response actions.
Provide technical guidance to engineering and operations teams on secure design patterns, Zero Trust principles, identity and access management, and boundary protections.
Support DISA/DoW RMF activities and ensure security requirements are incorporated into system designs and implementations.
Contribute to and maintain RMF/ATO artifacts, including SSPs, SARs, POA&Ms, diagrams, and implementation statements for system boundary-hosted components.
Map and implement DISA STIGs, the DoD Cloud Computing SRG, and applicable eMASS controls across Azure VMs and associated services.
Identify, document, and communicate security risks or compliance gaps to program leadership and customer stakeholders, and recommend mitigations.
Coordinate incident response for security and operational incidents affecting the system and the Cybersecurity Threat Hunt team.
Participate in incident triage, technical analysis, and root-cause investigations.
Direct technical containment, eradication, and recovery activities in coordination with the program incident manager and DISA stakeholders.
Capture lessons learned and help update runbooks, playbooks, detection rules, and hardening baselines to reduce recurrence.
Engage security, engineering, and operations counterparts to clarify requirements, constraints, and risk posture for DEOS services.
Provide briefings and technical input to change boards, engineering reviews, and security forums on proposed changes, risks, and mitigations.
Support responses to DISA/DoW data calls, audits, inspections, and technical reviews related to cybersecurity and system integrity.
Develop and maintain technical documentation for Azure components, including architecture diagrams, configuration baselines, runbook catalogs, incident response playbooks, and RMF artifacts.
Ensure activities align with Security Standard Practices, program-specific governance processes, and applicable ISO 27001 and information security management expectations.
Identify improvements to automation, monitoring, and repeatable processes that enhance DEOS security, reliability, and operational efficiency.