Information Security Engineer

Tepa Companies•Alexandria, VA

About The Position

The Tepa Companies are seeking an Information Security Engineer to protect the company’s information systems and digital assets through security operations, incident response, vulnerability management, and security engineering. The role serves as a technical responder for cybersecurity incidents across Tepa’s Commercial and regulated environments, conducting investigation, containment, remediation, recovery, and follow-up activities. The position also supports security platform administration and engineering, vulnerability remediation, security hardening, and implementation of security requirements associated with CMMC, NIST SP 800-171, and other applicable frameworks. The engineer maintains technical and compliance documentation, gathers evidence for assessments and audits, collaborates with IT and business stakeholders, and communicates risks and recommendations to technical and non-technical audiences. Occasional off-hours work may be required for incidents, maintenance, or other critical security activities.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related technical field, or an equivalent combination of education, training, and relevant professional experience.
At least 5 years of experience in cybersecurity, information security, systems engineering, infrastructure security, or a related technical role.
Hands-on experience investigating and responding to cybersecurity alerts and incidents.
Experience administering or supporting enterprise security technologies such as EDR, SIEM, vulnerability management, identity security, firewalls, email security, or cloud security platforms.
Experience supporting vulnerability identification, remediation, and security hardening.
Experience creating and maintaining technical documentation, including procedures, standards, work instructions, diagrams, incident records, and security configuration documentation.
Working knowledge of enterprise endpoints, servers, networking, identity, cloud services, and enterprise applications.
Working knowledge of cybersecurity and compliance frameworks such as CMMC, NIST SP 800-171, NIST Cybersecurity Framework, CIS Controls, or similar frameworks.
Strong working knowledge of incident response, security monitoring, vulnerability management, endpoint security, identity security, and enterprise security operations.
Strong technical troubleshooting and analytical skills, including the ability to independently investigate security events and determine appropriate remediation actions.
Working knowledge of cloud, endpoint, network, identity, and application security concepts.
Ability to implement and maintain security controls based on established architecture, standards, and organizational requirements.
Ability to translate technical security requirements into repeatable processes, standards, procedures, and work instructions.
Strong documentation skills, with attention to accuracy, completeness, and auditability.
Ability to balance security requirements with operational and business requirements and appropriately escalate risks or exceptions.
Strong written and oral communication skills, including the ability to explain technical security concepts to technical and non-technical audiences.
Strong collaboration skills and ability to work effectively across Security, Infrastructure, Cloud, End User Services, GRC, and business teams.
Ability to prioritize multiple operational, incident response, engineering, and documentation responsibilities.

Nice To Haves

Experience securing Microsoft Azure and Microsoft 365 environments.
Experience in regulated or controlled environments supporting CMMC, NIST SP 800-171, or similar requirements.
Experience with Microsoft Government Community Cloud High (GCC High) environments.
Experience with Microsoft Defender, Microsoft Sentinel, Entra ID, Intune, CrowdStrike, or comparable security platforms.
Experience with security automation, scripting, or workflow improvement using PowerShell, Python, APIs, or similar technologies.
Experience performing or supporting incident response exercises, tabletop exercises, security assessments, or audit activities.
Experience implementing CIS Benchmarks, DISA STIGs, or similar system-hardening standards.
GCIH, Security+, CySA+, CISSP, or similar security certifications.
Microsoft security certifications such as Azure Security Engineer Associate or other relevant Microsoft security credentials.
Other relevant incident response, cloud security, or cybersecurity engineering certifications.

Responsibilities

Perform day-to-day security monitoring and incident response, including alert triage, investigation, containment, remediation, recovery, and documentation.
Investigate security events and incidents using endpoint, identity, network, cloud, SIEM, and other security telemetry.
Coordinate with internal IT teams and third-party security providers during incident investigation and remediation.
Identify incident root causes and contributing factors and recommend technical or procedural improvements to prevent recurrence.
Implement, configure, administer, and maintain security platforms and controls for endpoint, identity, cloud, network, vulnerability management, and security monitoring.
Conduct vulnerability management, including review, validation, prioritization, remediation coordination, exception tracking, and remediation verification.
Assist with security hardening and configuration management using CIS Benchmarks, STIGs, and vendor recommendations.
Support security engineering initiatives involving Microsoft 365, Azure, endpoint security, identity and access management, network security, and related enterprise technologies.
Develop and maintain security processes, standards, procedures, work instructions, diagrams, and technical documentation.
Maintain documentation for Tepa’s Commercial environment and CMMC Level 2 enclave, including controls, procedures, incident response activities, and technical standards.
Support implementation and operation of requirements associated with CMMC, NIST SP 800-171, and other applicable security and compliance frameworks.
Collect and maintain technical evidence for security assessments, audits, control validation, and compliance activities.
Collaborate with Infrastructure, Cloud, End User Services, GRC, and business stakeholders to incorporate security requirements into processes and technical solutions.
Assist with testing and validating security controls and identify opportunities to improve security effectiveness, automation, and operational maturity.
Participate in incident response exercises, security assessments, and continuous improvement activities.
Communicate security findings, risks, remediation requirements, and technical recommendations to technical and non-technical stakeholders.
Be available for occasional off-hours work for cybersecurity incidents, maintenance, or other critical security activities.