Cybersecurity Engineer

Career Listings

Chantilly, VA

Full-time

9 days ago

Job Description

Benefits:

401(k)
401(k) matching
Dental insurance
Health insurance
Paid time off
Profit sharing
Tuition assistance
Vision insurance

SarelaTech is seeking a Cybersecurity Engineer to provide integrated cybersecurity and systems engineering support for cloud collaboration services delivered to DoW customers. This role designs and sustains secure architectures for Azure‑hosted workloads, implements and automates controls for cloud environments, and coordinates incident response activities with DISA and program stakeholders.

In this role, the Cybersecurity Engineer applies consultive approaches to uncover security and operational needs, anticipate threats, and position secure solutions that protect DoW information and ensure mission availability.

This position is 100% onsite in Chantilly, VA. Please be advised that no travel costs will be provided.

Security & Systems Engineering for Azure IL5/IL6 Environments

Design, document, and maintain secure architectures for services hosted in Azure and related environments (e.g., NSGs, Azure VMs supporting M365, management, monitoring, or integration services).
Build, configure, and administer Azure Virtual Machines supporting the program, including OS hardening (e.g., DISA STIGs/SRGs), patching, baseline configuration, and performance tuning.
Develop, maintain, and operate Azure Automation Runbooks to support secure operations and compliance (e.g., automated patching, configuration enforcement, log collection, backup/restore, and response actions).
Provide consultative technical guidance to the program’s engineering and operations teams on secure design patterns, Zero Trust principles, identity and access management, and boundary protections.

RMF / ATO and DISA/DoD Compliance Support

Support DISA/DoW Risk Management Framework (RMF) activities, ensuring security requirements are engineered into designs and implementations from the outset.
Contribute to and maintain RMF/ATO artifacts (SSP, SAR, POA&M, diagrams, implementation statements) specific to system boundary‑hosted components.
Map and implement DISA STIGs, DoD Cloud Computing SRG, and relevant eMASS controls across Azure VMs and associated services.
Identify, document, and communicate security risks or compliance gaps to program leadership and customer stakeholders, recommending practical mitigations.

Secure Operations & Incident Response Coordination

Coordinate incident response for security and operational incidents impacting the system and the Cybersecurity Threat Hunt team.
Participate in incident triage, technical analysis, and root‑cause investigations.
Direct technical containment, eradication, and recovery activities (e.g., isolate or revoke credentials), in coordination with the program’s incident manager and DISA stakeholders.
Capture lessons learned and drive assist in updates to runbooks, playbooks, detection rules, and hardening baselines to reduce recurrence.

Consultative Customer and Stakeholder Engagement

Engage with security, engineering, and operations counterparts to clarify requirements, constraints, and risk posture for DEOS services.
Provide consultancy‑style briefings and technical input to change boards, engineering reviews, and security forums on proposed changes, risks, and mitigations.
Support responses to DISA/DoW data calls, audits, inspections, and technical reviews related to cybersecurity and system integrity.

Documentation, Governance, and Continuous Improvement

Develop and maintain technical documentation for system’s Azure components, including architecture diagrams, configuration baselines, runbook catalogs, incident response playbooks, and RMF artifacts.
Ensure activities align with Security Standard Practices, program‑specific governance processes, and applicable ISO 27001 / information security management expectations.
Identify opportunities to improve automation, monitoring, and repeatable processes that enhance DEOS security, reliability, and operational efficiency.

What You’ll Need to Succeed (Required):
Education: Bachelor’s Degree. An additional 4 years of experience may be substituted in lieu of degree.
Clearance: Minimum of an active Secret security clearance required.
Certification: Current 8570 IAT Level II (Security+ CE, CCNA Security, CySA+, GICSP, GSEC, or SSCP) required.
Experience: 6+ years of related experience.
Technical skills:

Experience as a security engineer or systems engineer supporting DoW or DISA programs, including hands‑on work with production systems.
Demonstrated Azure experience, including: Deploying and managing Azure Virtual Machines, Implementing secure configurations, patching, and monitoring, and Developing or operating Azure Automation Runbooks.
Experience working within RMF/ATO processes (DoW RMF, DoD CC SRG, DISA STIGs, Vulnerability scanning) and producing/maintaining associated documentation.
Experience participating in or coordinating incident response for complex systems (triage, containment, eradication, recovery, lessons learned).
Strong consultative communication skills with the ability to explain complex security and system engineering topics to both technical and non‑technical stakeholders.

What You’ll Need to Succeed (Desired):

DoW 8570/8140 baseline certification at the appropriate level (e.g., CISM, CASP+, CISSP, or equivalent).
Microsoft Azure certifications (e.g., AZ‑104, AZ‑500, AZ‑700) and/or Microsoft 365 security/collaboration experience relevant to DEOS.
Prior experience on DISA or enterprise DoW collaboration/cloud programs.
Experience working with large, distributed operations teams and SOCs in a 24x7 mission environment.

Numbers & Facts

Location	Chantilly, VA
Job Type	Full-time

Skills

Architectural Servicesunmatched
Automationunmatched
Cloud Computingunmatched
Communication Skillsunmatched
Computer Securityunmatched
Cyber Threat Huntingunmatched
Data Recoveryunmatched
Defense Information Systems Agency (DISA)unmatched
Dental Insuranceunmatched
Design Documentunmatched
Design Patterns Programming Methodologiesunmatched
Documentationunmatched
Health Insuranceunmatched
ISO (International Organization for Standardization)unmatched
Identity Data Managementunmatched
Incident Managementunmatched
Incident Responseunmatched
Information/Data Security (InfoSec)unmatched
Internet Securityunmatched
Leadershipunmatched
Microsoft Certificationsunmatched
Microsoft Product Familyunmatched
Microsoft Windows Azureunmatched
Operating Systemsunmatched
Operational Supportunmatched
Operations Security (OPSEC)unmatched
Performance Tuning/Optimizationunmatched
Production Systemsunmatched
Project/Program Coordinationunmatched
Riskunmatched
Risk Managementunmatched
Risk Management Framework (RMF)unmatched
Root Cause Analysisunmatched
Security Monitoringunmatched
Service Deliveryunmatched
Software Patchesunmatched
System Integration (SI)unmatched
Systems Engineeringunmatched
Systems Maintenanceunmatched
Technical Analysisunmatched
Technical Leadershipunmatched
Technical Presentationunmatched
Technical Writingunmatched
Tuition Feesunmatched
United States Department of Defense (DoD)unmatched
VMS Operating Systemunmatched
Virtual Machine (VM)unmatched
Vision Planunmatched
Vulnerability Scannersunmatched

Level up your application

Professional resume templates

Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

Free resume templates

Resume Builder

Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

Resume Builder