Network Operations Center - Security Engineer

SteerBridge is seeking a Network Operations Center (NOC) Security Engineer to help monitor, troubleshoot, and protect network infrastructure while strengthening security controls. In this onsite role in Vienna, VA, you will investigate security alerts, remediate vulnerabilities, and coordinate with NOC, Security Engineering, and incident response teams to support both operational reliability and security event response.

Role overview

• Maintain security posture across a multi-account AWS GovCloud environment supporting reliable services.
• Own security architecture planning, assessments, and authorization packages in line with federal requirements.
• Partner across engineering and security operations to review designs, improve detections, and validate remediation.

Key responsibilities

• Define and maintain the target security architecture and roadmap for AWS GovCloud, including trust boundaries, data flows, shared services, hybrid connections, and external integrations, and advise program leadership on security, mission, cost, and delivery tradeoffs.
• Lead threat modeling and security design reviews for new capabilities and material changes, prioritizing risks and setting mitigation and validation needs.
• Establish secure cloud and hybrid baselines and reference architectures covering hardening, identity federation, least-privilege access, network segmentation, zero-trust access, encryption, and key and secrets management.
• Design protections for sensitive data across its lifecycle including API access, storage, retention, backup, recovery, and auditability in accordance with organizational security and privacy policies.
• Review Terraform and Terragrunt designs, cloud configurations, and GitLab CI/CD workflows, set software supply chain requirements for dependencies, containers, artifact integrity, and SBOMs, and mentor teams on secure delivery practices.
• Define logging, retention, and detection coverage requirements with security operations, review Microsoft Sentinel and AWS logging designs, and support audits, penetration testing, and incident response planning.
• Perform risk assessments, gap analyses, and vulnerability assessments; prioritize findings by mission impact; validate remediation with engineering teams; and escalate exceptions and residual risk to designated authorities.
• Develop, maintain, and own SSPs and ATO packages including boundary diagrams, control narratives, assessment evidence, and POA&Ms, applying NIST SP 800-53 and RMF through assessment, continuous monitoring, and reauthorization.

Required qualifications

• U.S. citizenship is required due to applicable federal contract requirements, and candidates must be able to obtain and maintain the security clearance required for the role.
• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Soft (Software) Engineering.
• 8+ years of experience in cybersecurity, cloud security, or security engineering, including 3+ years designing security architectures for complex cloud or enterprise systems.
• Expertise in multi-account AWS security including identity and access management, network segmentation, encryption and key management, and centralized logging.
• Familiarity with federal security requirements such as FISMA, FedRAMP, NIST SP 800-53, and RMF, including creating and maintaining SSPs and ATO packages, and ability to translate commercial requirements into architecture and control evidence across GLBA, CCPA, FinCEN reporting, PCI-DSS, GDPR, SOC 2, and ISO.

Technologies

• AWS GovCloud
• Microsoft Sentinel
• AWS
• Terraform
• Terragrunt
• GitLab CI/CD
• SBOMs
• NIST SP 800-53
• RMF
• FISMA
• FedRAMP
• GLBA, CCPA, PCI-DSS, GDPR, SOC 2, ISO

Compensation and location

• Location: Vienna, VA (onsite)
• Salary: USD 125,000 - 140,000 per year

Benefits

• Health insurance
• Dental insurance
• Vision insurance
• Life Insurance
• 401(k) Retirement Plan with matching
• Paid Time Off
• Paid Federal Holidays

Preferred qualifications

• 10+ years of cybersecurity experience in federal or large enterprise environments, including leadership of security architecture, threat modeling, and authorization activities in AWS GovCloud, VA programs, or other regulated federal cloud environments.
• Master’s degree or PhD in a related field, and/or certifications such as CISSP, ISSAP, CCSP, CISM, CAP, CASP, GSLC, AWS Certified Security – Specialty, or AWS Certified Solutions Architect – Professional.
• Experience with AWS Organizations, service control policies, landing zones, container security (ECS, Fargate, or Kubernetes), and infrastructure-as-code plus CI/CD supply chain security.
• Experience designing Microsoft Sentinel integrations, centralized security telemetry, and zero-trust access using Zscaler ZPA/ZIA, Palo Alto VM-Series, or comparable technologies.
• Experience conducting vendor and third-party security due diligence, including reviewing SOC reports and CUECs, interpreting contractual security flow-down requirements, and translating vendor assurance into ATO control inheritance and risk documentation.