Information Security Engineer

TEPA Companies•Alexandria, VA

About The Position

The Information Security Engineer supports the protection of Tepa’s information systems and digital assets through security operations, incident response, vulnerability management, and security engineering. The role serves as a technical responder for cybersecurity incidents, conducting investigation, containment, remediation, and follow-up across Tepa’s Commercial and regulated environments. The engineer implements and maintains security platforms and controls, supports security hardening and compliance requirements, and maintains technical documentation and evidence for security assessments and audits. The role collaborates with Infrastructure, Cloud, End User Services, GRC, and business stakeholders to incorporate security requirements into operational processes and technical solutions. Occasional off-hours work may be required for cybersecurity incidents, maintenance, or other critical security activities.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related technical field, or an equivalent combination of education, training, and relevant professional experience.
At least 5 years of experience in cybersecurity, information security, systems engineering, infrastructure security, or a related technical role.
Hands-on experience investigating and responding to cybersecurity alerts and incidents.
Experience administering or supporting enterprise security technologies such as EDR, SIEM, vulnerability management, identity security, firewalls, email security, or cloud security platforms.
Experience supporting vulnerability identification, remediation, and security hardening activities.
Experience creating and maintaining technical documentation, including procedures, standards, work instructions, diagrams, incident records, and security configuration documentation.
Working knowledge of enterprise technologies, including endpoints, servers, networking, identity, cloud services, and enterprise applications.
Working knowledge of cybersecurity and compliance frameworks such as CMMC, NIST SP 800-171, NIST Cybersecurity Framework, CIS Controls, or similar frameworks.
Strong working knowledge of incident response, security monitoring, vulnerability management, endpoint security, identity security, and enterprise security operations.
Strong technical troubleshooting and analytical skills, including the ability to independently investigate security events and determine appropriate remediation actions.
Working knowledge of cloud, endpoint, network, identity, and application security concepts.
Ability to implement and maintain security controls based on established architecture, standards, and organizational requirements.
Ability to translate technical security requirements into repeatable processes, standards, procedures, and work instructions.
Strong documentation skills, with attention to accuracy, completeness, and auditability.
Ability to balance security requirements with operational and business requirements and appropriately escalate risks or exceptions.
Strong written and oral communication skills, including the ability to explain technical security concepts to technical and non-technical audiences.
Strong collaboration skills and ability to work effectively across Security, Infrastructure, Cloud, End User Services, GRC, and business teams.
Ability to prioritize multiple operational, incident response, engineering, and documentation responsibilities.

Nice To Haves

Experience securing Microsoft Azure and Microsoft 365 environments.
Experience in regulated or controlled environments supporting CMMC, NIST SP 800-171, or similar requirements.
Experience with Microsoft Government Community Cloud High (GCC High) environments.
Experience with Microsoft Defender, Microsoft Sentinel, Entra ID, Intune, CrowdStrike, or comparable security platforms.
Experience with security automation, scripting, or workflow improvement using PowerShell, Python, APIs, or similar technologies.
Experience performing or supporting incident response exercises, tabletop exercises, security assessments, or audit activities.
Experience implementing CIS Benchmarks, DISA STIGs, or similar system-hardening standards.
GCIH, Security+, CySA+, CISSP, or similar security certifications.
Microsoft security certifications, such as Azure Security Engineer Associate, or other relevant Microsoft security credentials.
Other relevant incident response, cloud security, or cybersecurity engineering certifications.

Responsibilities

Perform security monitoring and incident response, including alert triage, investigation, containment, remediation, recovery, and documentation.
Investigate security events and incidents using endpoint, identity, network, cloud, SIEM, and other security telemetry.
Coordinate incident investigation and remediation with internal IT teams and third-party security providers.
Identify incident root causes and contributing factors, and recommend improvements to reduce recurrence.
Implement, configure, administer, and maintain security platforms and controls for endpoint, identity, cloud, network, vulnerability management, and security monitoring.
Conduct vulnerability management, including review, validation, prioritization, remediation coordination, exception tracking, and remediation verification.
Assist with security hardening and configuration management using CIS Benchmarks, STIGs, and vendor security recommendations.
Support security engineering initiatives involving Microsoft 365, Azure, endpoint security, identity and access management, network security, and related enterprise technologies.
Develop and maintain security processes, standards, procedures, work instructions, diagrams, and technical documentation.
Maintain documentation for Tepa’s Commercial environment and CMMC Level 2 enclave, including security controls, operational procedures, incident response activities, and technical standards.
Support implementation and operation of requirements associated with CMMC, NIST SP 800-171, and other applicable security and compliance frameworks.
Collect and maintain technical evidence for security assessments, audits, control validation, and compliance activities.
Collaborate with Infrastructure, Cloud, End User Services, GRC, and business stakeholders to integrate security requirements into operational processes and technical solutions.
Assist with security-control testing and validation, and identify opportunities to improve effectiveness, automation, and operational maturity.
Participate in incident response exercises, security assessments, and continuous improvement activities.
Communicate security findings, risks, remediation requirements, and technical recommendations to technical and non-technical stakeholders.
Be available for occasional off-hours work as needed for cybersecurity incidents, maintenance, or other critical security activities.