Senior Security Engineer
Job Description
Hybrid in Arlington, VA, you will help strengthen mission-critical security by building and sustaining SOC capabilities across on-premises and cloud environments. Zermount Inc supports reliable engineering standards, cross-functional collaboration, and practical knowledge transfer so teams can operate security platforms with confidence.
Compensation: USD 120,000 - 165,000 per year. Clearance: Active Secret clearance required. Experience: 7+ years in cybersecurity engineering.
What you’ll do
- Direct security architecture and end-to-end engineering work for SOC technologies, including research, evaluation, prototyping, integration, deployment, and sustainment.
- Design, deploy, configure, operate, maintain, and troubleshoot security tools, sensors, analytics platforms, data pipelines, and supporting infrastructure.
- Ensure solutions align with customer policies, technical standards, hardening requirements, and approved architecture direction.
- Lead integration and interoperability among tools, sensors, data sources, platforms, workflows, applications, and cloud services.
- Translate security and operational requirements into technical designs, implementation plans, test approaches, configurations, and support models.
- Produce and review architecture diagrams and engineering documentation, including configuration information, deployment records, test plans, and operational handoff materials.
- Coordinate technical changes through formal change-management processes and verify readiness prior to production implementation.
- Maintain awareness of asset, license, maintenance, support, certificate, and lifecycle dependencies that affect platform availability and supportability.
- Enable detection and automation teams by ensuring required telemetry, APIs, integrations, permissions, and platform capabilities are available and reliable.
- Develop and maintain engineering standards, reusable patterns, secure configurations, operating procedures, and technical knowledge content.
- Lead knowledge transfer and provide technical mentoring to engineers, administrators, analysts, and customer personnel.
Core requirements
- 7+ years of cybersecurity engineering experience.
- Experience developing and implementing cybersecurity solutions protecting systems, networks, applications, and cloud environments.
- Experience evaluating new technologies, investigating solution issues, validating complex systems, and testing security products for weaknesses.
- Ability to translate business and security requirements into technical designs and engineering documentation.
- Demonstrated ability to lead cross-functional engineering work and communicate with technical and nontechnical stakeholders.
- 5+ years with enterprise SOC platforms such as SIEM, SOAR, EDR, NDR, threat-intelligence, case-management, or log-pipeline technologies.
- Experience integrating security tooling across on-premises, AWS, Azure, or Microsoft 365 environments.
- Experience presenting changes through a formal change-control process and carrying solutions from design through implementation and operational acceptance.
- CISSP or CISSP-ISSEP preferred; GCIA, GCED, GSEC, GCDA, cloud-security, or platform-specific architecture certifications are valuable.
- Experience with security baselines, vulnerability remediation, cryptographic requirements, identity services, and technical documentation for regulated environments.
- Minimum education: Bachelor's degree in cybersecurity, computer science, information systems, engineering, or a related field (additional relevant experience may be considered in lieu of a degree).
- Active Secret clearance required.
Technologies you may work with
- SOC technologies, SIEM, SOAR, EDR, NDR, threat-intelligence, case-management, log-pipeline technologies
- AWS, Azure, Microsoft 365, APIs
- Certifications: CISSP, CISSP-ISSEP, GCIA, GCED, GSEC, GCDA
Work environment and hours
- Work location: Hybrid federal customer environment.
- Onsite presence: Regular onsite presence and periodic travel between supported operating locations may be required.
- Hours: Core business hours, participation in planned maintenance and change implementations, and after-hours response to major platform issues.
What success looks like
- Security platforms remain reliable, supportable, observable, and aligned with approved architecture and operational needs.
- Technical changes are designed, tested, documented, and transitioned into operations with minimal disruption.
- Integration gaps, lifecycle risks, and platform dependencies are surfaced before they impact mission delivery.
- Engineering knowledge stays current, reusable, and effectively transferred to operations and support personnel.