Security Engineer

Dunhill Government Solutions is hiring a Security Engineer to support the security posture of a platform team on a federal health program, working within a complex federal production environment. You will safeguard cloud infrastructure and sensitive data by designing, implementing and maintaining security solutions, identifying and mitigating security risks, automating security processes and keeping the platform compliant with industry best practices and regulatory requirements. This is a fully remote (telework) role on a cross-functional Agile team.
Responsibilities:
Research security issues and help create new security technology solutions
Design and develop scripts to automate the security control workflow lifecycle
Evaluate overall risk by using and enhancing monitoring systems and tools (custom, Splunk, New Relic, firewall, system, application, native CSP, SIEM and vulnerability scans)
Help develop and implement information security operational and strategic procedures, following industry best practices and compliance requirements
Execute large-scale data classification and security assessments
Develop and enforce policies for secure API key generation, storage and rotation
Manage remediation plans in support of risk assessment goals
Conduct threat modeling exercises to identify potential security risks and vulnerabilities
Follow the agency's security, accessibility, documentation, configuration management and software development lifecycle requirements
Provide technical guidance and share security knowledge with other team members
Required qualifications:
Bachelor's degree
At least four years of relevant experience across compliance, identity, networking, system data and cloud security
Experience researching security issues and helping create new security technology solutions
Experience evaluating overall risk using monitoring systems and tools (custom, Splunk, New Relic, firewall, system, application, native CSP, SIEM and vulnerability scans)
US citizenship
Preferred: Monitoring solutions (Splunk, New Relic and similar); scripting; Zero Trust Architecture; AWS or Azure security; remediation; PKI and API key management; threat modeling; certificate management; Okta; Kali Linux; red teaming, Hack The Box, capture-the-flag and penetration testing; the MITRE ATT&CK framework; a strong understanding of cloud security principles and best practices. Certifications such as CISSP, CCSP, CompTIA Security+, a cloud security certificate (any CSP), CISA or CCNA are a plus.
Location: Remote (telework), United States.
Compensation: $120,000 - $132,000 per year
US Citizenship and the ability to pass a federal background investigation in order to be granted access to sensitive information.
#cjpost

Work arrangement
Yes