Sr. Security Engineer

Halvik • Washington, DC

3d • Onsite

About The Position

Halvik is seeking a candidate to provide technical and operational support for a Federal customer's Security Operations Center (SOC). The candidate will support enterprise security monitoring, incident response, and threat detection across a hybrid IT environment, including on-premises infrastructure and cloud services. This role provides advanced security analysis, and threat detection and engineering to strengthen organizational cybersecurity operations and continuous monitoring capabilities. The candidate will have hands-on experience with technical troubleshooting, remediation validation, incident follow-up, compliance reviews, platform administration, and operational security initiatives. This role is on-site in Washington,DC.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science or related field
• Minimum of 8 years of cybersecurity experience.
• Demonstrated experience implementing and securing Azure cloud services including AKS, Azure Policy, Azure AD/Entra, Conditional Access, RBAC, and Zero Trust controls.
• Ability to evaluate security documentation and develop security test plans, evaluation methodologies, and technical recommendations.
• Ability to coordinate across cybersecurity teams and communicate technical information to leadership.
• Ensure compliance with Federal cybersecurity regulations, including NIST, FISMA, and associated guidance.
• Ensure artifacts, assessments, and system configurations remain aligned with NIST SP 800-53 controls, FedRAMP baselines, Federal agency policy and directives.
• CISSP or equivalent Cybersecurity certification (e.g., Security+).
• Cloud Architecture/Engineer or similar certification (Azure is a plus).
• Active Secret clearance is required.

Nice To Haves

• Demonstrated success supporting Federal contracts.
• Strong background coordinating with stakeholders (e.g., system owners, ISSOs, architecture teams, and cybersecurity leadership) to validate cybersecurity requirements, address information assurance concerns, and resolve compliance or security issues.
• Strong analytical, written, and verbal communication skills, with the ability to translate technical risks and content into terms suitable for executive and government stakeholders.
• Ability to work collaboratively with others and contribute to a team environment.

Responsibilities

• Developing, enhancing, and maintaining Security Operations Center (SOC) standard operating procedures (SOPs) and assessment operations processes.
• Ensuring accountability, integrity, confidentiality, and protection of operational security processes and data.
• Performing vulnerability analysis, reviewing program-level documentation (system requirements, architectures, design documents, test plans, security plans), and providing technical recommendations.
• Developing and documenting security evaluation plans, test procedures, and assessment methodologies.
• Conducting hands-on security testing, analyzing results, identifying risk, and recommending countermeasures.
• Assessing and calculating risk based on identified threats, vulnerabilities, and security control weaknesses.
• Identifying and documenting mitigation strategies for threats, vulnerabilities, and deficiencies.
• Supporting the design, development, and implementation of security-related systems, tools, and assessment capabilities.
• Participating in or leading technical exchange meetings, documenting action items and outcomes, and briefing leadership on security engineering status and results.
• Supporting SOC alert analysis, triage, escalation, containment actions, and continuous improvement of detection and response use cases.
• Leading the engineering and implementation of secure cloud solutions – primarily in Microsoft Azure – in alignment with the organization's cybersecurity strategy and Federal compliance mandates (e.g., NIST, FISMA, FedRAMP).
• Integrating Zero Trust security principles across Azure cloud environments, including identity hardening, micro-segmentation, conditional access, and continuous monitoring.
• Configuring and operationalizing Azure cloud platform services including: Azure Kubernetes Service (AKS) secure cluster configuration, governance, and node-pool hardening, Azure policy creation and enforcement, Secure Landing Zones following Azure enterprise-scale frameworks, Role-Based Access Control (RBAC) and least-privilege access models, Resource tagging, naming standards, and governance implementation.

Benefits

• Company-supported medical, dental, vision, life, STD, and LTD insurance
• Benefits include 11 federal holidays and PTO
• Eligible employees may receive performance-based incentives in recognition of individual and/or team achievements.
• 401(k) with company matching
• Flexible Spending Accounts for commuter, medical, and dependent care expenses
• Tuition Assistance
• Charitable Contribution matching

What This Job Offers

• Job Type: Full-time
• Career Level: Senior