Security Engineer

Scientific Research Corporation • Orlando, FL

4d

About The Position

SRC is hiring a hands-on Security Engineer embedded in Agile teams to secure virtualized Modeling & Simulation (M&S) environments, automate compliance-as-code across diverse infrastructure, and develop custom security tools and telemetry dashboards. The role combines technical execution with security governance, including advising security leadership, managing vulnerabilities, and maintaining continuous compliance with DoD directives.

The Security Engineer implements and coordinates patching across Linux, Windows, VMware, and Cisco environments; automates patching; conducts vulnerability scans and DISA STIG audits; analyzes and remediates risk; and hardens physical and virtual systems. The position also supports POA&M tracking, maintains security policies and technical standards, assesses risk, supports audits and authorization packages, and advises the ISSO and ISSM on classified DoD networks.

The role designs, deploys, configures, and manages security solutions such as SIEM, EDR, IDS/IPS, firewalls, IAM, and VPNs; evaluates and integrates security technologies; and collaborates with Agile development squads throughout sprint planning, estimation, and retrospectives to align security engineering with release schedules.

Requirements

• Active DoD 8570/8140 IAT Level II baseline credential, such as CompTIA Security+ CE, CySA+, or equivalent, required on day one.
• Active DoD Secret clearance with verified TS/SCI eligibility and ability to pass a Single Scope Background Investigation.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related technical field; equivalent professional experience will be considered.
• Strong understanding of network protocols and security architecture patterns, with hands-on experience securing Linux- and Windows-based systems.
• High proficiency in scripting and programming languages such as Python, PowerShell, and Bash to build automated tools and utilities.
• Hands-on experience with automation and configuration management tools such as Ansible, Terraform, Puppet, or Chef.
• Practical understanding of CI/CD concepts, including embedding security controls, automated testing, and compliance-as-code into deployment pipelines.
• In-depth knowledge of modern threat landscapes, software vulnerabilities, threat mitigation techniques, and standard security processes.
• Strong familiarity with cybersecurity frameworks and control sets, specifically NIST SP 800-53, NIST SP 800-171, SOC 2, and/or ISO 27001.
• Ability to author clear, concise, and accurate cybersecurity guidance, SOPs, and program documentation.
• U.S. citizenship is required.

Nice To Haves

• Prior experience supporting cybersecurity operations for high-fidelity DoD modeling, simulation, and synthetic training networks.
• Experience conducting threat modeling, static code analysis (SAST), or dynamic code analysis (DAST) within software development lifecycles.
• Familiarity with securing Docker containerized environments and Kubernetes orchestration platforms.

Responsibilities

• Implement, coordinate, and maintain patching procedures across Linux, Windows, VMware virtual layers, and Cisco network systems.
• Design and deploy automated patching processes for Windows and Linux workloads.
• Execute and review vulnerability scans and DISA STIG compliance audits.
• Analyze vulnerability data, prioritize remediation, and address risks across endpoints, networks, and software applications.
• Secure and harden physical and virtual hardware, operating systems, and software configurations.
• Track and support the resolution and milestone completion of program POA&M items.
• Author, update, and maintain program security policies, operational procedures, and technical security standards.
• Ensure engineering and operational activities comply with DoD standards, directives, regulations, and NIST frameworks.
• Conduct structured risk assessments and provide technical support for program audits.
• Advise the ISSO and ISSM on security, engineering, and monitoring of classified DoD networks.
• Create and maintain data flow and system boundary diagrams for authorization packages.
• Keep abreast of emerging technologies, cyber threats, vulnerabilities, and security tools.
• Design, implement, configure, and manage security solutions, including Splunk SIEM, Trellix EDR, Wazuh Host/Network IDS/IPS, firewalls, IAM, and VPNs.
• Evaluate, test, and integrate new security technologies and SaaS or on-premises solutions.
• Embed with Agile software development squads and collaborate during sprint planning, story estimation, and retrospectives.

Benefits

• Medical, dental, and vision plans.
• 401(k) with company match.
• Life insurance.
• Vacation and sick paid time off accruals, with amounts increasing based on role and years of service.
• 11 paid holidays.
• Tuition reimbursement.
• Work environment that encourages excellence.

What This Job Offers

• Job Type: Full-time