The Senior Security Engineer at Zermount Inc directs the architecture, integration, deployment, operation, and sustainment of security tools, sensors, platforms, and data sources across on-premises and cloud environments.
Location and Work Model
Arlington, VA (hybrid)
The role supports a hybrid federal customer environment and requires regular onsite presence along with periodic travel between supported operating locations, as needed.
Salary
USD 120,000 - 165,000 per year
Summary
The Senior Security Engineer translates mission and security requirements into implementable engineering designs, leads technical change through established processes, and maintains engineering standards and documentation. The position also includes mentoring engineering and platform administrators.
Key Responsibilities
- Lead security architecture, strategy, research, evaluation, prototyping, integration, deployment, and sustainment activities for SOC technologies.
- Design, deploy, configure, operate, maintain, and troubleshoot security tools, sensors, analytics platforms, data pipelines, and supporting infrastructure.
- Ensure solutions align with customer policies, technical standards, hardening requirements, and approved architecture direction.
- Lead integration and interoperability across tools, sensors, data sources, platforms, workflows, applications, and cloud services.
- Translate security and operational requirements into technical designs, implementation plans, test approaches, configurations, and support models.
- Produce and review architecture diagrams, engineering design documents, configuration information, deployment records, test plans, and operational handoff materials.
- Coordinate technical changes using change-management processes and verify readiness prior to production implementation.
- Maintain awareness of asset, license, maintenance, support, certificate, and lifecycle dependencies impacting platform availability and supportability.
- Enable detection and automation teams through reliable telemetry, APIs, integrations, permissions, and platform capabilities.
- Develop and maintain engineering standards, reusable patterns, secure configurations, operating procedures, and technical knowledge content.
- Lead knowledge transfer and technical mentoring for engineers, administrators, analysts, and customer personnel.
Required Qualifications
- Seven or more years of cybersecurity engineering experience.
- Experience developing and implementing cybersecurity solutions that protect systems, networks, applications, and cloud environments.
- Experience evaluating new technologies, investigating solution issues, validating complex systems, and testing security products for weaknesses.
- Ability to translate business and security requirements into technical designs and engineering documentation.
- Demonstrated ability to lead cross-functional engineering work and communicate with both technical and nontechnical stakeholders.
- Five or more years supporting enterprise SOC platforms such as SIEM, SOAR, EDR, NDR, threat-intelligence, case-management, or log-pipeline technologies.
- Experience integrating security tooling across on-premises, AWS, Azure, or Microsoft 365 environments.
- Experience presenting changes through a formal change-control process and carrying solutions from design through implementation and operational acceptance.
- Active Secret clearance required.
- Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or a related field; additional relevant experience may be considered in lieu of a degree.
Preferred Qualifications
- CISSP or CISSP-ISSEP preferred
- GCIA, GCED, GSEC, GCDA, cloud-security, or platform-specific architecture certifications are valuable.
- Experience with security baselines, vulnerability remediation, cryptographic requirements, identity services, and technical documentation for regulated environments.
Technologies
- SOC technologies
- SIEM, SOAR, EDR, NDR
- Threat-intelligence, case-management
- Log-pipeline technologies
- AWS, Azure, Microsoft 365
- APIs
- CISSP, CISSP-ISSEP
- GCIA, GCED, GSEC, GCDA
Hours of Operation
Core business hours with participation in planned maintenance, change implementations, and after-hours response to major platform issues.
What Success Looks Like
- Security platforms remain reliable, supportable, observable, and aligned with approved architecture and operational needs.
- Technical changes are thoroughly designed, tested, documented, and transitioned into operations with minimal disruption.
- Integration gaps, lifecycle risks, and platform dependencies are identified before they impact mission delivery.
- Engineering knowledge stays current, reusable, and effectively transferred to operations and support personnel.
