1785 - Network Security Engineer II

Sigma Defense • San Diego, CA

9d • $95,000 - $136,000 • Onsite

About The Position

Sigma Defense is seeking a Network Security Engineer II to join its team in San Diego, California. The engineer will implement and enforce Department of Defense cybersecurity policies across CANES systems, address vulnerabilities, harden systems and network infrastructure, and support compliance, incident response, testing, and production installations. The role includes engineering and automating configurations for Linux and Windows platforms, SIEM/SOAR tools, ACAS, Trellix ESS, and configuration-management tools such as GitLab/GitHub and Spork/Spork+.

The role requires U.S. citizenship, a bachelor's degree from an accredited college or university, 3–10 years of experience, Security+ CE or CISSP, and at least one operating system or platform certification in Linux, Windows, VMware, or Cisco. The candidate must possess or be able to obtain an active Secret security clearance or higher. The annual salary range is $95,000–$136,000.

Requirements

• 3–10 years of experience.
• Must be a U.S. citizen.
• Bachelor's degree from an accredited college or university.
• Security+ CE or CISSP certification.
• At least one operating system or platform certification in Linux, Windows, VMware, or Cisco.
• Must possess or have the ability to obtain an active Secret security clearance or higher.

Nice To Haves

• RHEL 7+ administration expertise.
• Windows administration expertise, including Win2019/2020 through 2025+.
• Sentinel and Splunk experience is preferred.

Responsibilities

• Implement and enforce DoD cybersecurity policies, including STIGs, RMF, and NIST SP 800-53, across CANES systems.
• Design, develop, implement, and troubleshoot solutions for vulnerabilities within the CANES system.
• Lead efforts to harden Windows and Linux systems, applications, network devices, and other hardware in the CANES environment.
• Assist with IAVM compliance, log analysis, and audit-readiness tasks.
• Perform patch management and system scanning, and coordinate incident response.
• Maintain system documentation, cybersecurity artifacts, and baseline reports.
• Support system validation during test events, site assessments, and production installations.
• Design, develop, and automate configurations across RHEL, Windows, SIEM/SOAR, ACAS, and Trellix ESS platforms.
• Submit configuration updates via GitLab/GitHub and Spork/Spork+.

Benefits

• Dental and vision insurance.
• Medical insurance, including HSA, FSA, and DFSA plans.
• Life and AD&D coverage.
• Employee Assistance Program (EAP).
• 401(k) plan with company matching contributions.
• 160 hours of paid time off (PTO).
• 12 floating holidays.
• Educational assistance.
• Highly competitive salary.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level