Senior Security Engineer

Diné Development Corporation•Washington, DC

About The Position

The Senior Security Engineer combines senior cybersecurity engineering, SOC support, security assessment, vulnerability and risk analysis, and secure Microsoft Azure engineering. The engineer develops and improves security processes, conducts hands-on testing, supports alert triage and response, and designs and implements secure cloud solutions aligned with the cybersecurity strategy and federal requirements including NIST, FISMA, FedRAMP, and Zero Trust principles. This Role is Contingent Upon Award.

Requirements

Minimum 8 years of cybersecurity experience.
Bachelor’s degree (BS/BA) in Information Technology, Computer Science, Cybersecurity, or a related technical field.
Secret clearance or higher.
Security+ or CISSP CISSP or equivalent recognized cybersecurity certification AND a Cloud Architecture/Engineer or similar certification.
Demonstrated experience securing Azure services including AKS, Azure Policy, Azure AD/Entra, Conditional Access, RBAC, secure Landing Zones, and Zero Trust controls.
Ability to evaluate security documentation, build security test plans and evaluation methodologies, coordinate across cybersecurity teams, and communicate technical issues to leadership.

Nice To Haves

Network/security engineering or other relevant industry certifications are also desirable.

Responsibilities

Develop, enhance, and maintain Security Operations Center (SOC) SOPs and security assessment operations processes.
Protect the integrity, confidentiality, and accountability of operational security processes and data.
Perform vulnerability analysis and review system requirements, architectures, design documents, test plans, and security plans; provide senior technical recommendations.
Develop security evaluation plans, test procedures, and assessment methodologies; conduct hands-on security testing and analyze results.
Assess and calculate risk based on threats, vulnerabilities, security-control weaknesses, and testing results; document mitigation strategies and countermeasures.
Support the design, development, and implementation of security-related systems, tools, and assessment capabilities.
Lead or participate in technical exchange meetings, document outcomes and action items, and brief leadership on security engineering status and results.
Support SOC alert analysis, triage, escalation, containment actions, and continuous improvement of detection and response use cases.
Lead engineering and implementation of secure Microsoft Azure solutions aligned with NIST, FISMA, FedRAMP, and NTIA cybersecurity requirements.
Implement Zero Trust controls across Azure, including identity hardening, micro-segmentation, Conditional Access, continuous monitoring, RBAC/least privilege, and governance.
Configure and secure Azure services and controls including AKS, Azure Policy, secure Landing Zones, Azure AD/Entra, Conditional Access, RBAC, resource tagging, naming standards, and governance controls.
Other duties as assigned.