Cybersecurity Engineer

Cb•Chantilly, VA

4d•Onsite

About The Position

SarelaTech is seeking a Cybersecurity Engineer to provide integrated cybersecurity and systems engineering support for cloud collaboration services delivered to DoW customers. The role designs and sustains secure architectures for Azure-hosted workloads, implements and automates controls for cloud environments, and coordinates incident response activities with DISA and program stakeholders. The engineer applies consultative approaches to uncover security and operational needs, anticipate threats, and position secure solutions that protect DoW information and ensure mission availability. The position is 100% onsite in Chantilly, Virginia. No travel costs will be provided.

Requirements

Bachelor’s degree, or an additional four years of experience in lieu of a degree.
Active Secret security clearance.
Current 8570 IAT Level II certification, such as Security+ CE, CCNA Security, CySA+, GICSP, GSEC, or SSCP.
At least six years of related experience.
Experience as a security engineer or systems engineer supporting DoW or DISA programs, including hands-on work with production systems.
Azure experience, including deploying and managing Azure Virtual Machines, implementing secure configurations, patching and monitoring, and developing or operating Azure Automation Runbooks.
Experience with RMF/ATO processes, including DoW RMF, DoD CC SRG, DISA STIGs, vulnerability scanning, and producing or maintaining associated documentation.
Experience participating in or coordinating incident response for complex systems, including triage, containment, eradication, recovery, and lessons learned.
Strong consultative communication skills and ability to explain complex security and systems engineering topics to technical and non-technical stakeholders.

Nice To Haves

DoW 8570/8140 baseline certification at the appropriate level, such as CISM, CASP+, CISSP, or equivalent.
Microsoft Azure certifications, such as AZ-104, AZ-500, or AZ-700, and/or Microsoft 365 security or collaboration experience relevant to DEOS.
Prior experience on DISA or enterprise DoW collaboration/cloud programs.
Experience working with large, distributed operations teams and SOCs in a 24x7 mission environment.

Responsibilities

Design, document, and maintain secure architectures for Azure-hosted services and related environments, including NSGs and Azure VMs supporting M365, management, monitoring, or integration services.
Build, configure, and administer Azure Virtual Machines, including operating-system hardening using DISA STIGs/SRGs, patching, baseline configuration, and performance tuning.
Develop, maintain, and operate Azure Automation Runbooks for secure operations and compliance, including automated patching, configuration enforcement, log collection, backup and restore, and response actions.
Provide technical guidance to engineering and operations teams on secure design patterns, Zero Trust principles, identity and access management, and boundary protections.
Support DISA/DoW RMF activities and engineer security requirements into designs and implementations.
Contribute to and maintain RMF/ATO artifacts, including SSPs, SARs, POA&Ms, diagrams, and implementation statements for system boundary-hosted components.
Map and implement DISA STIGs, the DoD Cloud Computing SRG, and relevant eMASS controls across Azure VMs and associated services.
Identify, document, and communicate security risks and compliance gaps to program leadership and customer stakeholders, and recommend mitigations.
Coordinate incident response for security and operational incidents affecting the system and Cybersecurity Threat Hunt team.
Participate in incident triage, technical analysis, and root-cause investigations.
Direct technical containment, eradication, and recovery activities, such as isolating systems or revoking credentials, in coordination with the incident manager and DISA stakeholders.
Capture lessons learned and help update runbooks, playbooks, detection rules, and hardening baselines to reduce recurrence.
Engage security, engineering, and operations counterparts to clarify requirements, constraints, and risk posture for DEOS services.
Provide briefings and technical input to change boards, engineering reviews, and security forums on proposed changes, risks, and mitigations.
Support responses to DISA/DoW data calls, audits, inspections, and technical reviews related to cybersecurity and system integrity.
Develop and maintain documentation for Azure components, including architecture diagrams, configuration baselines, runbook catalogs, incident response playbooks, and RMF artifacts.
Align work with Security Standard Practices, program-specific governance processes, and applicable ISO 27001 and information security management expectations.
Identify opportunities to improve automation, monitoring, and repeatable processes that enhance DEOS security, reliability, and operational efficiency.