Security engineer

Dunhill Government Solutions is hiring a Security Engineer to support the security posture of a platform team on a federal health program, working within a complex federal production environment. You will safeguard cloud infrastructure and sensitive data by designing, implementing and maintaining security solutions, identifying and mitigating security risks, automating security processes and keeping the platform compliant with industry best practices and regulatory requirements. This is a fully remote (telework) role on a cross-functional Agile team.

Responsibilities:

• Research security issues and help create new security technology solutions
• Design and develop scripts to automate the security control workflow lifecycle
• Evaluate overall risk by using and enhancing monitoring systems and tools (custom, Splunk, New Relic, firewall, system, application, native CSP, SIEM and vulnerability scans)
• Help develop and implement information security operational and strategic procedures, following industry best practices and compliance requirements
• Execute large-scale data classification and security assessments
• Develop and enforce policies for secure API key generation, storage and rotation
• Manage remediation plans in support of risk assessment goals
• Conduct threat modeling exercises to identify potential security risks and vulnerabilities
• Follow the agency's security, accessibility, documentation, configuration management and software development lifecycle requirements
• Provide technical guidance and share security knowledge with other team members

Required qualifications:

• Bachelor's degree
• At least 4 years of relevant experience across compliance, identity, networking, system data and cloud security
• Experience researching security issues and helping create new security technology solutions
• Experience evaluating overall risk using monitoring systems and tools (custom, Splunk, New Relic, firewall, system, application, native CSP, SIEM and vulnerability scans)
• US citizenship

Preferred:

• Monitoring solutions (Splunk, New Relic and similar); scripting; Zero Trust Architecture; AWS or Azure security; remediation; PKI and API key management; threat modeling; certificate management; Okta; Kali Linux; red teaming, Hack The Box, capture-the-flag and penetration testing; the MITRE ATT&CK framework; a strong understanding of cloud security principles and best practices.
• Certifications such as CISSP, CCSP, CompTIA Security+, a cloud security certificate (any CSP), CISA or CCNA are a plus.

Location: Remote (telework), United States.

Compensation: $120,000 - $132,000 per year

US Citizenship and the ability to pass a federal background investigation in order to be granted access to sensitive information.