SteerBridge

SDVOSB delivering federal technology solutions

Network Operations Center Security Engineer

Security Engineering & ArchitecturePosted on Nov 13

Full-timeVienna, VA, USA$125k - $140k /yrIn-person

About the Job

Requirements

U.S. citizenship is required, and candidates must be able to obtain and maintain the security clearance required for the role.
A bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering is required.
At least 8 years of experience in cybersecurity, cloud security, or security engineering is required, including at least 3 years designing security architectures for complex cloud or enterprise systems.
Expertise in multi-account AWS security, including identity and access management, network segmentation, encryption and key management, and centralized logging, is required.
Expertise with federal security requirements, including FISMA, FedRAMP, NIST SP 800-53, and RMF, including creating and maintaining SSPs and ATO packages, is required.
Expertise with commercial requirements such as GLBA, CCPA, FinCEN reporting, PCI-DSS, GDPR, SOC 2, and ISO, and the ability to translate requirements into architecture and control evidence, is required.

Responsibilities

Define and maintain the target security architecture and roadmap for a multi-account AWS GovCloud environment, including trust boundaries, data flows, shared services, hybrid connections, and external integrations, and advise program leadership on security, mission, cost, and delivery tradeoffs.
Lead threat modeling and security design reviews for new capabilities and material changes, prioritize risks, and define mitigation and validation requirements.
Define secure cloud and hybrid baselines and reference architectures for hardening, identity federation, least-privilege access, network segmentation, zero-trust access, encryption, and key and secrets management.
Design protection for sensitive data throughout its lifecycle, including API access, storage, retention, backup, recovery, and auditability, in accordance with organizational security and privacy policies.
Review Terraform and Terragrunt designs, cloud configurations, and GitLab CI/CD workflows; set software supply chain requirements for dependencies, containers, artifact integrity, and SBOMs; and mentor engineering teams on secure delivery.
Define logging, retention, and detection coverage requirements with security operations, review Microsoft Sentinel and AWS logging designs, and support audits, penetration testing, and incident response planning.
Conduct risk assessments, gap analyses, and vulnerability assessments, prioritize findings by mission impact, validate remediation with engineering teams, and escalate exceptions and residual risk to designated authorities.
Develop, maintain, and own SSPs and ATO packages, including boundary diagrams, control narratives, assessment evidence, and POA&Ms, applying NIST SP 800-53 and RMF through assessment, continuous monitoring, and reauthorization.

Desired Qualifications

At least 10 years of cybersecurity experience in federal or large enterprise environments, including leadership of security architecture, threat modeling, and authorization activities in AWS GovCloud, VA programs, or other regulated federal cloud environments.
A master's degree or PhD in a related field, and/or certifications such as CISSP, ISSAP, CCSP, CISM, CAP, CASP, GSLC, AWS Certified Security – Specialty, or AWS Certified Solutions Architect – Professional.
Experience with AWS Organizations, service control policies, landing zones, container security using ECS, Fargate, or Kubernetes, and infrastructure-as-code and CI/CD supply chain security.
Experience designing Microsoft Sentinel integrations, centralized security telemetry, and zero-trust access using Zscaler ZPA/ZIA, Palo Alto VM-Series, or comparable technologies.
Experience conducting vendor and third-party security due diligence, including reviewing SOC reports and CUECs, interpreting contractual security flow-down requirements, and translating vendor assurance into ATO control inheritance and risk documentation.

Salary Range: 125000 to 140000 (Currency: USD) (Pay period: per-year-salary)

SteerBridge is a modern technology company delivering innovative, mission‑focused solutions to the U.S. Government and private sector. Leveraging deep expertise in federal acquisition, digital transformation, and emerging technologies, we deliver agile, commercial‑grade capabilities that accelerate operational effectiveness and drive measurable mission success.

At the core of SteerBridge is our people—especially the veterans whose leadership, problem‑solving mindset, and commitment to excellence elevate every project we support. We don’t simply hire exceptional talent; we cultivate it, creating meaningful career pathways for veterans, military spouses, and professionals who share our passion for advancing technology and strengthening the missions we serve.

Position Overview

We are seeking a Network Operations Center (NOC) Security Engineer to monitor, troubleshoot, and secure our network infrastructure. This role combines daily network operations with hands-on security engineering, including maintaining network security controls, investigating alerts, and remediating vulnerabilities. The engineer will work with NOC colleagues, Security Engineering, and incident response teams to maintain reliable services and respond to operational and security events. The ideal candidate brings strong troubleshooting skills, sound security judgment, and clear documentation and communication habits.

Key Responsibilities

Define and maintain the target security architecture and roadmap for a multi-account AWS GovCloud environment, including trust boundaries, data flows, shared services, hybrid connections, and external integrations, and advise program leadership on security, mission, cost, and delivery tradeoffs.
Lead threat modeling and security design reviews for new capabilities and material changes, prioritizing risks and defining mitigation and validation requirements.
Define secure cloud and hybrid baselines and reference architectures for hardening, identity federation, least-privilege access, network segmentation, zero-trust access, encryption, and key and secrets management.
Design protection for sensitive data throughout its lifecycle, including API access, storage, retention, backup, recovery, and auditability, in accordance with organizational security and privacy policies.
Review Terraform and Terragrunt designs, cloud configurations, and GitLab CI/CD workflows, set software supply chain requirements for dependencies, containers, artifact integrity, and SBOMs, and mentor engineering teams on secure delivery.
Define logging, retention, and detection coverage requirements with security operations, review Microsoft Sentinel and AWS logging designs, and support audits, penetration testing, and incident response planning.
Conduct risk assessments, gap analyses, and vulnerability assessments, prioritize findings by mission impact, validate remediation with engineering teams, and escalate exceptions and residual risk to designated authorities.
Develop, maintain, and own SSPs and ATO packages, including boundary diagrams, control narratives, assessment evidence, and POA&Ms, applying NIST SP 800-53 and RMF through assessment, continuous monitoring, and reauthorization.

Required Qualifications

Eligibility Requirements: U.S. citizenship is required for this position under applicable federal contract requirements. Candidates must also be able to obtain and maintain the security clearance required for the role.
Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering.
8+ years of experience in cybersecurity, cloud security, or security engineering, including 3+ years designing security architectures for complex cloud or enterprise systems, with expertise in multi-account AWS security (identity and access management, network segmentation, encryption and key management, and centralized logging).
Expertise with federal security requirements (FISMA, FedRAMP, NIST SP 800-53, and RMF), including creating and maintaining SSPs and ATO packages, and with commercial requirements such as GLBA, CCPA, FinCEN reporting, PCI-DSS, GDPR, SOC 2, and ISO, with the ability to translate requirements into architecture and control evidence.

Preferred Qualifications

10+ years of cybersecurity experience in federal or large enterprise environments, including leadership of security architecture, threat modeling, and authorization activities in AWS GovCloud, VA programs, or other regulated federal cloud environments.
Master’s degree or PhD in a related field, and/or certifications such as CISSP, ISSAP, CCSP, CISM, CAP, CASP, GSLC, AWS Certified Security – Specialty, or AWS Certified Solutions Architect – Professional.
Experience with AWS Organizations, service control policies, landing zones, container security (ECS, Fargate, or Kubernetes), and infrastructure-as-code and CI/CD supply chain security.
Experience designing Microsoft Sentinel integrations, centralized security telemetry, and zero-trust access using Zscaler ZPA/ZIA, Palo Alto VM-Series, or comparable technologies.
Experience conducting vendor and third-party security due diligence, including reviewing SOC reports and CUECs, interpreting contractual security flow-down requirements, and translating vendor assurance into ATO control inheritance and risk documentation.

Benefits

Health insurance
Dental insurance
Vision insurance
Life Insurance
401(k) Retirement Plan with matching
Paid Time Off
Paid Federal Holidays

SteerBridge is proud to be an Equal Opportunity Employer. We are committed to creating a diverse and inclusive workplace where all qualified applicants and employees are treated with respect and dignity—regardless of race, color, gender, age, religion, national origin, ancestry, disability, veteran status, genetic information, sexual orientation, or any other characteristic protected by law.

We also provide reasonable accommodations for individuals with disabilities in accordance with applicable laws. If you require assistance during the application process, we encourage you to reach out so we can support your needs.

About the Company

SteerBridge

SDVOSB delivering federal technology solutions

SteerBridge delivers technology solutions, professional services, and construction management to U.S. government agencies and the private sector, acting as a prime or subcontractor. Its offerings include aviation analytics, veterans-services modernization (GI Bill and VA claims), secure payments, cloud infrastructure, and facilities management, using cloud-based workflows and data analytics to streamline complex processes. It differentiates itself with SDVOSB status, extensive federal contracting experience, and proven improvements like reducing GI Bill processing times from 30 days to 30 seconds, plus AWS Premier Partner capabilities. Its goal is to partner with federal agencies and the private sector to deliver practical, mission-critical technology and program-management solutions that improve efficiency, security, and service delivery for veterans, government operations, and civilian customers.

Company size: 201-500
Company stage: Not listed
Total funding: Not listed
Headquarters: Not listed
Founded: 2011

Recently Posted Jobs

Explore more opportunities at SteerBridge

See more jobs