Security Tools Engineer Lead

RIVA Solutions Inc.•Washington, DC

10d•$155,000•Hybrid

About The Position

RIVA Solutions is seeking an experienced Security Tools Engineer Lead to manage and sustain ITA cybersecurity tools and lead technical activities supporting enterprise threat detection, vulnerability management, application security, incident response, web security, and AI platform protection. This role ensures security tools are configured, monitored, tuned, and supported to maintain effective enterprise protection and reliable service delivery.

Requirements

At least 7 years of experience in enterprise cybersecurity operations or a related IT security role
Proven experience supporting security operations, including threat detection, incident response, vulnerability assessment, and authenticated infrastructure and web application scanning.
Demonstrated experience managing and optimizing enterprise cybersecurity tools, including SIEM, EDR, vulnerability management platforms, and web application firewalls, with responsibility for configuration, tuning, monitoring, troubleshooting, and technical support.
Strong understanding of application and infrastructure security, including security impact reviews, change assessments, web application firewall policy management, and security control implementation to protect enterprise environments.
Ability to communicate technical findings, service status, capacity, performance, and security posture to technical and non-technical stakeholders.
U.S. Citizenship and Secret Clearance.

Nice To Haves

Experience supporting federal civilian cybersecurity programs or Department of Commerce environments.
Experience securing, monitoring, or governing enterprise AI platforms.

Responsibilities

Manage and sustain ITA cybersecurity tools, including user account provisioning, access controls, configuration, tuning, and ongoing tool performance.
Manage threat detection and response capabilities needed to protect the enterprise environment.
Resolve customer support tickets involving security tool functionality, access concerns, configuration requests, and performance issues in a timely and accurate manner.
Perform credentialed enterprise vulnerability scanning across all in-scope systems capable of supporting authenticated scans.
Perform vulnerability scanning of internet-facing and internal web applications to identify security weaknesses.
Conduct security reviews of new software before introduction into the environment and reassess previously authorized software receiving new drivers or major version updates.
Implement Web Application Firewall rule tuning and policy refinement in response to emerging threat patterns identified by the Enterprise Security Operations Center (ESOC).
Respond to and resolve ESOC-related incident response tickets according to established priorities.
Support secure configuration, monitoring, access restrictions, data protection, and ongoing security controls for approved AI platforms and services.
Integrate AI platform logging and telemetry into enterprise security monitoring and support detection of anomalous, unauthorized, or unapproved AI tool usage.
Provide technical security input on AI platform configurations, data handling, access controls, and enterprise AI governance objectives.
Produce regular reporting on tool capacity, performance, and the overall enterprise security posture.
Support the contractual security tool availability requirement and coordinate corrective action when service or performance issues arise.