Network Operations Center - Security Engineer

SteerBridge•Vienna, VA

21h

About The Position

SteerBridge is seeking a Network Operations Center (NOC) Security Engineer to monitor, troubleshoot, and secure network infrastructure. The role combines daily network operations with hands-on security engineering, including maintaining security controls, investigating alerts, and remediating vulnerabilities. The engineer will collaborate with NOC colleagues, Security Engineering, and incident response teams to maintain reliable services and respond to operational and security events. The position calls for strong troubleshooting skills, sound security judgment, and clear documentation and communication. The engineer will define and maintain security architecture and roadmaps for a multi-account AWS GovCloud environment; lead threat modeling and security design reviews; establish secure cloud and hybrid baselines; and design protections for sensitive data across its lifecycle. The role also covers reviewing infrastructure-as-code and CI/CD designs, setting software supply-chain requirements, defining logging and detection coverage, conducting risk and vulnerability assessments, validating remediation, and owning System Security Plans (SSPs) and Authorization to Operate (ATO) packages under federal security frameworks. U.S. citizenship is required under applicable federal contract requirements. The candidate must be able to obtain and maintain the security clearance required for the role. Compensation is listed at $125,000–$140,000 per year, with the final offer based on relevant experience, skills, education, certifications, work location, position responsibilities, and, where applicable, contract requirements and labor categories. SteerBridge is an Equal Opportunity Employer and provides reasonable accommodations for applicants and employees with disabilities.

Requirements

U.S. citizenship is required under applicable federal contract requirements.
Must be able to obtain and maintain the security clearance required for the role.
Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering.
At least 8 years of experience in cybersecurity, cloud security, or security engineering, including at least 3 years designing security architectures for complex cloud or enterprise systems.
Expertise in multi-account AWS security, including identity and access management, network segmentation, encryption and key management, and centralized logging.
Expertise with federal security requirements, including FISMA, FedRAMP, NIST SP 800-53, and RMF, including creating and maintaining SSPs and ATO packages.
Experience with commercial requirements such as GLBA, CCPA, FinCEN reporting, PCI-DSS, GDPR, SOC 2, and ISO, and ability to translate requirements into architecture and control evidence.

Nice To Haves

At least 10 years of cybersecurity experience in federal or large enterprise environments, including leadership of security architecture, threat modeling, and authorization activities in AWS GovCloud, VA programs, or other regulated federal cloud environments.
Master’s degree or PhD in a related field.
Certifications such as CISSP, ISSAP, CCSP, CISM, CAP, CASP, GSLC, AWS Certified Security – Specialty, or AWS Certified Solutions Architect – Professional.
Experience with AWS Organizations, service control policies, landing zones, container security (ECS, Fargate, or Kubernetes), and infrastructure-as-code and CI/CD supply-chain security.
Experience designing Microsoft Sentinel integrations, centralized security telemetry, and zero-trust access using Zscaler ZPA/ZIA, Palo Alto VM-Series, or comparable technologies.
Experience conducting vendor and third-party security due diligence, including reviewing SOC reports and CUECs, interpreting contractual security flow-down requirements, and translating vendor assurance into ATO control inheritance and risk documentation.

Responsibilities

Define and maintain the target security architecture and roadmap for a multi-account AWS GovCloud environment, including trust boundaries, data flows, shared services, hybrid connections, and external integrations; advise program leadership on security, mission, cost, and delivery tradeoffs.
Lead threat modeling and security design reviews for new capabilities and material changes, prioritizing risks and defining mitigation and validation requirements.
Define secure cloud and hybrid baselines and reference architectures covering hardening, identity federation, least-privilege access, network segmentation, zero-trust access, encryption, and key and secrets management.
Design protections for sensitive data throughout its lifecycle, including API access, storage, retention, backup, recovery, and auditability, in accordance with organizational security and privacy policies.
Review Terraform and Terragrunt designs, cloud configurations, and GitLab CI/CD workflows; set software supply-chain requirements for dependencies, containers, artifact integrity, and SBOMs; mentor engineering teams on secure delivery.
Define logging, retention, and detection coverage requirements with security operations; review Microsoft Sentinel and AWS logging designs; support audits, penetration testing, and incident response planning.
Conduct risk assessments, gap analyses, and vulnerability assessments; prioritize findings by mission impact, validate remediation with engineering teams, and escalate exceptions and residual risk to designated authorities.
Develop, maintain, and own SSPs and ATO packages, including boundary diagrams, control narratives, assessment evidence, and POA&Ms; apply NIST SP 800-53 and RMF through assessment, continuous monitoring, and reauthorization.