Senior Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Gormat

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2014

🔒 Cybersecurity

🏛️ Government

🎖️ Defense

Cybersecurity • Government • Defense

Gormat is a Rockville, Maryland–based cybersecurity and engineering services firm (founded 2015) that provides cybersecurity, information assurance, zero-trust implementations, systems and software engineering, program management, and acquisition support to both commercial and government customers. The company emphasizes support for the Department of Defense, the Intelligence Community, and federal agencies while also serving private-sector clients in technology, finance, healthcare, manufacturing, and retail. Gormat highlights a highly cleared workforce (99% TS/SCI with full‑scope polygraphs), a large veteran presence, and a focus on mission-critical IT/OT cybersecurity, assessments and mitigations, and engineering solutions.

📋 Description

• Provide architectural and design oversight to ensure enterprise security requirements are met across all systems. • Serve as a Subject Matter Expert on enterprise security architecture and ensure designs align with mission, business, and compliance requirements. • Translate organizational security goals into technical requirements for infrastructure and applications. • Evaluate enterprise cybersecurity architecture effectiveness and recommend improvements. • Oversee the deployment, configuration, and management of enterprise security platforms, including SIEM, IDS/IPS, logging, UAM, EDR, SOAR, Elastic Search, and encryption technologies. • Assess, test, select, and integrate security tools with an emphasis on scalability and automation. • Conduct security testing and evaluation for new platforms and integrations. • Perform vulnerability scanning, analysis, and reporting to identify enterprise security weaknesses. • Recommend mitigations and track remediation efforts across teams. • Ensure effective system hardening, patch management, and configuration management practices. • Collaborate with SOC and Incident Response teams to triage, investigate, and mitigate threats. • Identify anomalous activity and potential threats using logs, network data, and defensive tools. • Develop and refine content for SIEM and cyber defense platforms. • Create dashboards and reports that improve visibility into the organization's security posture. • Build and maintain automated scripts and processes for monitoring, alerting, and remediation. • Perform health checks on systems, applications, and security services to ensure availability. • Recommend emerging technologies to improve detection and response capabilities. • Oversee enterprise ICAM implementations, including multi-factor authentication and least privilege models. • Provide expertise on authentication and authorization protocols such as SAML, OAuth2, and PKI. • Ensure compliance with NIST, ISO 27001, FedRAMP, HIPAA, and other applicable frameworks. • Develop and enforce security policies, STIGs, and hardening guidelines. • Provide documentation, audit support, and compliance reporting to leadership. • Collaborate with developers and system architects to integrate security into the systems development lifecycle. • Conduct security reviews, testing, and evaluations during system development and release cycles. • Maintain protected repositories of technical documentation, artifacts, and system configurations. • Provide training and security awareness sessions for technical teams and stakeholders. • Collaborate with IT, DevOps, and Engineering teams to integrate security into daily operations.

🎯 Requirements

• Bachelor's degree in Information Technology, Cybersecurity, Data Science, Information Systems, Computer Science, or a related field from an ABET-accredited or CAE-designated institution. • Minimum of six (6) years of experience in Information Technology (IT) and/or Information Security (IS). • Must possess at least one DoD 8140 certification applicable to the role or obtain certification within six (6) months of onboarding. • Must maintain required DoD 8140 certification(s) throughout employment. • Must be able to successfully complete a DEA background investigation. • Must possess an active Secret clearance (or higher) and be eligible to obtain a Top Secret clearance if required. • Advanced certifications aligned with DCWF Roles 521, 461, 651, or 622, including: • - ISC2: CISSP-ISSAP, CISSP-ISSEP, CCSP, CSSLP, SSCP • - EC-Council: CEH • - GIAC: GCIA, GCLD, GICSP, GCSA, GSNA, GDSA, GFACT, GISF, GSEC • - CompTIA: CySA+, PenTest+, Security+, SecurityX/CASP+ • In-depth knowledge of SIEM platforms, scripting languages (Python, SPL, KQL), network security, and threat intelligence. • Hands-on experience with Splunk, Elastic Search, and ServiceNow. • Experience with APIs, webhooks, and custom queries for data ingestion. • Strong cloud security experience in multi-cloud enterprise environments (AWS and/or Azure). • Experience migrating applications to cloud environments and implementing cloud security controls. • Experience across the DevOps lifecycle, including orchestration, configuration management, CI/CD, monitoring, and security. • Experience using automation and orchestration technologies such as GitHub Actions, Jenkins, CircleCI, Ansible, Azure DevOps, GitLab CI, and Bitbucket Pipelines. • Scripting and automation experience using PowerShell, Azure CLI, or similar technologies.