Information Security Engineer

Tepa LLC is seeking an Information Security Engineer to help protect Tepa’s information systems and digital assets across commercial and regulated environments, including CMMC Level 2 enclaves. In this role, you will support security operations through monitoring, incident response, vulnerability management, and security engineering, helping drive investigation, containment, remediation, and follow-up.

Location and role details

• Location: Alexandria, VA (onsite)
• Salary: USD 110,000 to 150,000 per year
• Minimum experience: 5+ years

Responsibilities

• Handle day-to-day security monitoring and incident response, including alert triage, investigation, containment, remediation, recovery, and documentation.
• Investigate security events and incidents using endpoint, identity, network, cloud, SIEM, and other security telemetry.
• Coordinate with internal IT teams and third-party security providers during incident investigation and remediation.
• Identify root causes and contributing factors after incidents and recommend technical or procedural improvements to reduce recurrence.
• Implement, configure, administer, and maintain security platforms and controls for endpoint, identity, cloud, network, vulnerability management, and security monitoring.
• Perform vulnerability management activities including review, validation, prioritization, remediation coordination, exception tracking, and verification of completed remediation.
• Support security hardening and configuration management using security baselines and guidance such as CIS Benchmarks, STIGs, and vendor recommendations.
• Support security engineering initiatives involving Microsoft 365, Azure, endpoint security, identity and access management, network security, and related enterprise technologies.
• Develop and maintain security processes, standards, procedures, work instructions, diagrams, and other technical documentation.
• Maintain documentation for Tepa’s commercial environment and CMMC Level 2 enclave, including security controls, operational procedures, incident response activities, and technical standards.
• Support security requirements tied to CMMC, NIST SP 800-171, and other applicable compliance frameworks.
• Collect and maintain technical evidence for assessments, audits, control validation, and compliance activities.
• Collaborate with Infrastructure, Cloud, End User Services, GRC, and other stakeholders to incorporate security requirements into operational processes and technical solutions.
• Assist with testing and validation of security controls, identifying opportunities to improve effectiveness, automation, and operational maturity.
• Participate in incident response exercises, security assessments, and continuous improvement efforts.
• Communicate security findings, risks, remediation needs, and technical recommendations to technical and non-technical stakeholders.
• Be available for occasional off-hours work as required to support cybersecurity incidents, maintenance, or other critical security activities.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related technical field, or an equivalent combination of education, training, and relevant professional experience.
• 5+ years of experience in cybersecurity, information security, systems engineering, infrastructure security, or a related role.
• Hands-on experience investigating and responding to cybersecurity alerts and incidents.
• Experience administering or supporting enterprise security technologies such as EDR, SIEM, vulnerability management, identity security, firewalls, email security, or cloud security platforms.
• Experience supporting vulnerability identification, remediation, and security hardening.
• Experience creating and maintaining technical documentation, including procedures, standards, work instructions, diagrams, incident records, and security configuration documentation.
• Working knowledge of enterprise technologies including endpoints, servers, networking, identity, cloud services, and enterprise applications.
• Working knowledge of cybersecurity and compliance frameworks such as CMMC, NIST SP 800-171, NIST CSF, CIS Controls, or similar frameworks.
• Strong knowledge of incident response, security monitoring, vulnerability management, endpoint security, identity security, and enterprise security operations.
• Technical troubleshooting and analytical skills to independently investigate security events and determine appropriate remediation actions.
• Working knowledge of cloud, endpoint, network, identity, and application security concepts.
• Ability to implement and maintain security controls based on established architecture, standards, and organizational requirements.
• Ability to translate technical security requirements into repeatable processes, standards, procedures, and work instructions.
• Strong documentation skills with focus on accuracy, completeness, and auditability.
• Ability to balance security requirements with operational and business needs and appropriately escalate risks or exceptions.
• Strong written and oral communication skills for technical and non-technical audiences.
• Collaboration skills across Security, Infrastructure, Cloud, End User Services, GRC, and business teams.
• Ability to prioritize multiple responsibilities across operational work, incident response, engineering, and documentation.

Technologies

• Microsoft 365
• Azure
• Endpoint detection and response (EDR)
• SIEM
• Vulnerability management
• Identity security
• Firewalls
• Email security
• Cloud security platforms
• CIS Benchmarks
• STIGs
• CMMC
• NIST SP 800-171
• NIST Cybersecurity Framework
• CIS Controls
• PowerShell
• Python
• APIs
• Microsoft Defender
• Microsoft Sentinel
• Entra ID
• Intune
• CrowdStrike
• Microsoft Government Community Cloud High (GCC High)
• GCIH
• Security+
• CySA+
• CISSP
• Azure Security Engineer Associate

Benefits

• Comprehensive medical, dental, and vision coverage
• Generous paid time off and holidays
• 401(k) plan with company match
• Life insurance
• Flexible spending and health savings account
• Mental health support and resources
• Short and long-term disability
• Tuition reimbursement

Preferred experience (not required)

• Experience securing Microsoft Azure and Microsoft 365 environments.
• Experience working within regulated or controlled environments supporting CMMC, NIST SP 800-171, or similar requirements.
• Experience with Microsoft Government Community Cloud High (GCC High) environments.
• Experience with Microsoft Defender, Microsoft Sentinel, Entra ID, Intune, CrowdStrike, or comparable security platforms.
• Experience with security automation, scripting, or workflow improvement using PowerShell, Python, APIs, or similar technologies.
• Experience performing or supporting incident response exercises, tabletop exercises, security assessments, or audit activities.
• Experience implementing CIS Benchmarks, DISA STIGs, or similar system-hardening standards.
• GCIH, Security+, CySA+, CISSP, or similar security certifications.
• Microsoft security certifications such as Azure Security Engineer Associate or other relevant Microsoft security credentials.
• Other relevant incident response, cloud security, or cybersecurity engineering certifications.