Security Engineer

ECS Federal•Portland, OR

10d•Hybrid

About The Position

Everforth ECS is seeking a Security Engineer to support development and maturation of an Information Security Continuous Monitoring (ISCM) program for a federal customer. The role interprets federal security requirements, translates compliance mandates into practical security control implementations, and drives continuous visibility across enterprise systems. It combines security control framework expertise with hands-on engineering, with a focus on SIEM engineering, log pipeline optimization, and actionable dashboards and visualizations for technical teams and leadership. The engineer will lead risk-based vulnerability management, use Axonius CAASM tooling to address asset visibility gaps, and build automations that streamline continuous monitoring workflows. Cloud security experience in AWS, Azure, or hybrid environments is highly desirable. The position is based in Portland, Oregon, with a hybrid arrangement. Remote candidates should expect work hours closely aligned with the client’s core hours of 7 a.m.–3 p.m. Pacific Time.

Requirements

At least five years of experience in security engineering or closely related technical security roles.
Strong expertise with Linux and Windows operating systems, networking concepts and protocols, and common enterprise system architectures.
Strong understanding of common attack techniques, defensive controls, detection approaches, and secure configuration practices.
Hands-on experience with enterprise security tools such as SIEM, EDR/XDR, IDS/IPS, vulnerability scanners, and firewalls.
Experience contributing to incident response efforts, root cause analysis, and remediation planning.
Strong scripting or automation skills using Python, Bash, PowerShell, or similar languages.
Ability to work independently, prioritize competing technical issues, and make sound decisions under pressure.
Strong written and verbal communication skills, including the ability to document and communicate risks, findings, tradeoffs, and recommendations to technical teams and leadership.

Nice To Haves

Cloud security experience with AWS, Azure, or hybrid environments.

Responsibilities

Implement and maintain security controls across network, endpoint, cloud, application, and enterprise infrastructure environments.
Evaluate and recommend security tools, technologies, and configurations.
Embed security into system lifecycles, engineering workflows, operational processes, and production environments.
Design, tune, and validate detection logic, alerts, monitoring rules, and analytics for threats and anomalous activity.
Support incident response, including triage, investigation, containment, remediation, and recovery coordination.
Perform root cause analysis and drive long-term corrective actions after security incidents or control failures.
Support threat hunting, proactive risk identification, and security assessment activities.
Oversee vulnerability management, including prioritization, remediation guidance, exception review, and risk-based reporting.
Conduct security assessments, configuration reviews, hardening activities, and technical control validation.
Support compliance, audit, and risk management initiatives with technical evidence, analysis, and remediation plans.
Translate technical findings into practical risk and mitigation recommendations for technical and leadership audiences.
Develop scripts, tooling, automation, and repeatable workflows to improve security operations, monitoring, and response efficiency.
Partner with DevOps, SRE, infrastructure, and engineering teams to integrate security tooling into CI/CD pipelines and operational workflows.
Improve reliability, scalability, performance, and maintainability of security platforms and integrations.
Document engineering standards, runbooks, design decisions, and operational procedures.
Serve as an escalation point for complex security engineering issues.
Work with the operational team to document processes and requirements.
Collaborate with IT, DevOps, product, application, cloud, compliance, and SOC teams.