Security Engineer

Talteam Inc.•Washington, DC

About The Position

Talteam Inc. is seeking a Security Engineer to join their team. This role involves developing, enhancing, and maintaining Security Operations Center (SOC) standard operating procedures (SOPs) and assessment operations processes. The engineer will ensure accountability, integrity, confidentiality, and protection of operational security processes and data. Key responsibilities include performing vulnerability analysis, reviewing program-level documentation, and providing technical recommendations. The role also involves developing and documenting security evaluation plans, test procedures, and assessment methodologies, as well as conducting hands-on security testing and analyzing results to identify risks and recommend countermeasures. The engineer will assess and calculate risk, identify mitigation strategies, and support the design and implementation of security-related systems. Participation in technical exchange meetings, briefing leadership, and supporting SOC alert analysis are also key aspects of the position. A significant focus will be on leading the engineering and implementation of secure cloud solutions, primarily in Microsoft Azure, ensuring alignment with cybersecurity strategy and Federal compliance mandates. This includes integrating Zero Trust security principles and configuring various Azure cloud platform services.

Requirements

Demonstrated experience implementing and securing Azure cloud services including AKS, Azure Policy, Azure AD/Entra, Conditional Access, RBAC, and Zero Trust controls.
Ability to evaluate security documentation and develop security test plans, evaluation methodologies, and technical recommendations.
Ability to coordinate across cybersecurity teams and communicate technical information to leadership.
Ensure compliance with Federal cybersecurity regulations, including NIST, FISMA, and associated guidance.
Ensure artifacts, assessments, and system configurations remain aligned with NIST SP 800-53 controls, FedRAMP baselines, Federal agency policy and directives.
CISSP or equivalent Cybersecurity certification (e.g., Security+).
Cloud Architecture/Engineer or similar certification (Azure is a plus).
Minimum of 8 years of cybersecurity experience.
Secret Clearance

Nice To Haves

Demonstrated success supporting Federal contracts.
Strong background coordinating with stakeholders (e.g., system owners, ISSOs, architecture teams, and cybersecurity leadership) to validate cybersecurity requirements, address information assurance concerns, and resolve compliance or security issues.
Strong analytical, written, and verbal communication skills, with the ability to translate technical risks and content into terms suitable for executive and government stakeholders.
Ability to work collaboratively with others and contribute to a team environment.

Responsibilities

Developing, enhancing, and maintaining Security Operations Center (SOC) standard operating procedures (SOPs) and assessment operations processes.
Ensuring accountability, integrity, confidentiality, and protection of operational security processes and data.
Performing vulnerability analysis, reviewing program-level documentation (system requirements, architectures, design documents, test plans, security plans), and providing technical recommendations.
Developing and documenting security evaluation plans, test procedures, and assessment methodologies.
Conducting hands-on security testing, analyzing results, identifying risk, and recommending countermeasures.
Assessing and calculating risk based on identified threats, vulnerabilities, and security control weaknesses.
Identifying and documenting mitigation strategies for threats, vulnerabilities, and deficiencies.
Supporting the design, development, and implementation of security-related systems, tools, and assessment capabilities.
Participating in or leading technical exchange meetings, documenting action items and outcomes, and briefing leadership on security engineering status and results.
Supporting SOC alert analysis, triage, escalation, containment actions, and continuous improvement of detection and response use cases.
Leading the engineering and implementation of secure cloud solutions – primarily in Microsoft Azure – in alignment with the organization's cybersecurity strategy and Federal compliance mandates (e.g., NIST, FISMA, FedRAMP).
Integrating Zero Trust security principles across Azure cloud environments, including identity hardening, micro-segmentation, conditional access, and continuous monitoring.
Configuring and operationalizing Azure cloud platform services including: Azure Kubernetes Service (AKS) secure cluster configuration, governance, and node-pool hardening, Azure policy creation and enforcement, Secure Landing Zones following Azure enterprise-scale frameworks, Role-Based Access Control (RBAC) and least-privilege access models, and Resource tagging, naming standards, and governance implementation.