Security Engineer (Active Top Secret Clearance Required)

Seneca Holdings•Washington, DC

2d•Hybrid

About The Position

Clear Creek Federal is seeking a highly skilled and experienced Security Engineer to join our team, in Washington, D.C. The successful candidate will be responsible for ensuring the security and integrity of systems, networks, and data across the enterprise. The ideal candidate will possess extensive hands-on experience in security engineering, Risk Management Framework (RMF) implementation, and Security Configuration Management (SCM) tools such as Tripwire and CyberArk. This role is a senior individual contributor position with no direct people-management responsibilities. Currently, this position is offered as a Hybrid Role, with 2 days remote. At any time, the client may ask all workforce to be 100% onsite.

Requirements

IDS/IPS, penetration testing, and vulnerability assessment in virtualized Windows environments.
Firewall administration and intrusion detection/prevention technologies.
Tripwire, CyberArk, and other SCM tools.
Windows Active Directory (AD).
Virtual machine encryption technologies.
Identity and access management principles.
Application security and data-at-rest encryption.
Secure network architectures.
Information Assurance Assessment and Authorization (A&A) processes.
Knowledge of APTs, phishing, social engineering, NAC, and anti-malware technologies.
U.S. Citizen; Top-Secret Clearance.
Strong technical cybersecurity expertise.
Excellent analytical and problem-solving skills.
Strong written and verbal communication skills.
Ability to work independently with minimal supervision.
Ability to collaborate effectively across technical teams.
Ability to manage multiple priorities under pressure.

Responsibilities

Implement and manage security measures in accordance with RMF guidelines.
Utilize Tripwire, CyberArk, and other SCM tools to maintain secure system configurations.
Configure, maintain, and troubleshoot security platforms and supporting infrastructure.
Implement and manage IDS/IPS capabilities and perform vulnerability assessments.
Configure and manage firewall and network security controls.
Apply identity and access management principles to secure systems and data.
Support application security initiatives and data protection requirements.
Conduct security assessments and support A&A activities.
Monitor, analyze, and respond to cybersecurity threats and vulnerabilities.
Collaborate with engineers, administrators, and stakeholders to remediate security risks.
Ensure compliance with security policies, procedures, and regulatory requirements.
Document security configurations, assessments, and remediation activities.