Security Engineer

Senior Security Engineer
Washington, DC
Pay: $160k - $190k

MUST:
Experienced Senior Security Engineer
Must have Top Secret clearance
10 years of senior-level experience securing enterprise network, cloud, identity, and security environments.
Experience with routing and switching security, enterprise firewalls, IDS/IPS, VPN/ZTNA, DNS security, NAC, SIEM telemetry onboarding, vulnerability remediation, and incident-response triage.
5 years of experience integrating and validating security logs in Microsoft Sentinel or a comparable SIEM, including threat analysis, log correlation, containment, root cause analysis, and remediation coordination.
5 years of experience implementing privileged-access governance, MFA, RBAC, least privilege, and secure administrative practices.
5 years of experience supporting AWS network and cloud security, including VPCs, security groups, network ACLs, VPC Flow Logs, CloudTrail, hybrid routing, and secure on-premises-to-cloud integration.
Bachelors preferred

DUTIES:
Design, implement, and maintain cybersecurity solutions across network, cloud, endpoint, identity, application, and data environments.
Advance Zero Trust Architecture in alignment with NIST SP 800-207 and applicable federal cybersecurity requirements.
Administer enterprise firewalls, security policies, NAT, VPNs, IDS/IPS, application controls, threat prevention, logging, and upgrades.
Engineer Network Access Control solutions including Cisco ISE, 802.1X, device profiling, posture validation, and segmentation policies.
Operate and enhance Microsoft Sentinel, Defender for Endpoint, Defender for Identity, Defender for Cloud, and Defender for Cloud Apps.
Onboard, normalize, and validate security telemetry; develop SIEM analytics, correlation rules, alerts, dashboards, workbooks, and automated responses.
Lead incident-response activities including triage, scoping, log correlation, containment, evidence preservation, eradication, and recovery support.
Coordinate vulnerability scanning, risk prioritization, patching, configuration remediation, exception tracking, and validation.
Implement MFA, Conditional Access, RBAC, privileged access management, identity governance, and least-privilege controls.
Assess and secure AWS IAM, VPCs, security groups, network ACLs, CloudTrail, VPC Flow Logs, and hybrid connections.
Support audits, security assessments, plans of action and milestones, IRS safeguard requirements, FTI controls, and federal compliance activities.
Develop security architecture diagrams, configuration baselines, playbooks, SOPs, risk records, and compliance evidence.
Quadrant is an affirmative action/equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, status as a protected veteran, or status as an individual with a disability. Healthcare benefits are offered to all eligible employees according to compliance mandated by the Affordable Care Act.