CybersecurityJobs.io
← Back to all jobs

Job Description

Hybrid in Arlington, VA, you will help strengthen mission-critical security by building and sustaining SOC capabilities across on-premises and cloud environments. Zermount Inc supports reliable engineering standards, cross-functional collaboration, and practical knowledge transfer so teams can operate security platforms with confidence.

Compensation: USD 120,000 - 165,000 per year. Clearance: Active Secret clearance required. Experience: 7+ years in cybersecurity engineering.

What you’ll do

  • Direct security architecture and end-to-end engineering work for SOC technologies, including research, evaluation, prototyping, integration, deployment, and sustainment.
  • Design, deploy, configure, operate, maintain, and troubleshoot security tools, sensors, analytics platforms, data pipelines, and supporting infrastructure.
  • Ensure solutions align with customer policies, technical standards, hardening requirements, and approved architecture direction.
  • Lead integration and interoperability among tools, sensors, data sources, platforms, workflows, applications, and cloud services.
  • Translate security and operational requirements into technical designs, implementation plans, test approaches, configurations, and support models.
  • Produce and review architecture diagrams and engineering documentation, including configuration information, deployment records, test plans, and operational handoff materials.
  • Coordinate technical changes through formal change-management processes and verify readiness prior to production implementation.
  • Maintain awareness of asset, license, maintenance, support, certificate, and lifecycle dependencies that affect platform availability and supportability.
  • Enable detection and automation teams by ensuring required telemetry, APIs, integrations, permissions, and platform capabilities are available and reliable.
  • Develop and maintain engineering standards, reusable patterns, secure configurations, operating procedures, and technical knowledge content.
  • Lead knowledge transfer and provide technical mentoring to engineers, administrators, analysts, and customer personnel.

Core requirements

  • 7+ years of cybersecurity engineering experience.
  • Experience developing and implementing cybersecurity solutions protecting systems, networks, applications, and cloud environments.
  • Experience evaluating new technologies, investigating solution issues, validating complex systems, and testing security products for weaknesses.
  • Ability to translate business and security requirements into technical designs and engineering documentation.
  • Demonstrated ability to lead cross-functional engineering work and communicate with technical and nontechnical stakeholders.
  • 5+ years with enterprise SOC platforms such as SIEM, SOAR, EDR, NDR, threat-intelligence, case-management, or log-pipeline technologies.
  • Experience integrating security tooling across on-premises, AWS, Azure, or Microsoft 365 environments.
  • Experience presenting changes through a formal change-control process and carrying solutions from design through implementation and operational acceptance.
  • CISSP or CISSP-ISSEP preferred; GCIA, GCED, GSEC, GCDA, cloud-security, or platform-specific architecture certifications are valuable.
  • Experience with security baselines, vulnerability remediation, cryptographic requirements, identity services, and technical documentation for regulated environments.
  • Minimum education: Bachelor's degree in cybersecurity, computer science, information systems, engineering, or a related field (additional relevant experience may be considered in lieu of a degree).
  • Active Secret clearance required.

Technologies you may work with

  • SOC technologies, SIEM, SOAR, EDR, NDR, threat-intelligence, case-management, log-pipeline technologies
  • AWS, Azure, Microsoft 365, APIs
  • Certifications: CISSP, CISSP-ISSEP, GCIA, GCED, GSEC, GCDA

Work environment and hours

  • Work location: Hybrid federal customer environment.
  • Onsite presence: Regular onsite presence and periodic travel between supported operating locations may be required.
  • Hours: Core business hours, participation in planned maintenance and change implementations, and after-hours response to major platform issues.

What success looks like

  • Security platforms remain reliable, supportable, observable, and aligned with approved architecture and operational needs.
  • Technical changes are designed, tested, documented, and transitioned into operations with minimal disruption.
  • Integration gaps, lifecycle risks, and platform dependencies are surfaced before they impact mission delivery.
  • Engineering knowledge stays current, reusable, and effectively transferred to operations and support personnel.

Similar Jobs