Sr. Security Engineer

Title: Sr. Security Engineer
Location: Fulton, MD (HYBRID) or Raleigh, NC (HYBRID)
Duration: Initial 12 month contract with extensions
Compensation: $70/hour - $84/hour
Work Requirements: US Citizen, GC Holders or Authorized to Work in the U.S.
 
Sr. Security Engineer
Key Responsibilities:

• Monitor security alerts and events using SIEM and security monitoring tools.
• Analyze and triage escalated security incidents; conduct in-depth investigations.
• Respond to and contain security incidents, ensuring proper escalation when necessary.
• Perform root cause analysis and recommend mitigation strategies.
• Support threat hunting activities and proactive identification of risks.
• Develop and tune correlation rules, alerts, and dashboards.
• Monitor and investigate security events in **Kubernetes** and containerized environments, identifying misconfigurations, suspicious activity, and potential threats.
• Collaborate with infrastructure and DevOps teams to improve the security posture of Kubernetes clusters and container workloads.
• Document incidents, investigations, and recommendations in ticketing systems.
• Collaborate with IT, engineering, and business units to ensure security best practices.
• Mentor and assist Tier 1 analysts with complex investigations.
• Serve as a subject matter expert by investigating and presenting intelligence on the latest cyber threats, vulnerabilities, and industry best practices weekly or bi-weekly.

Required Skills & Experience:

• 5+ years of experience in a Security Operations Center or similar security role.
• Strong analytical and problem-solving skills.
• Proactively identify tasks and take ownership to ensure their completion.
• Demonstrate initiative and the capability to work autonomously with minimal supervision.
• Experience securing and monitoring **Kubernetes** clusters and containerized workloads.
• Understanding of Kubernetes architecture, including pods, namespaces, services, RBAC, network policies, and secrets management.
• Experience with Kubernetes security tools such as **Falco, Kubescape, Trivy, Aqua Security, Prisma Cloud, or Wiz Kubernetes Security** is a plus.
• Experience with the following tools/platforms:
  • Cloud Security: Wiz, Azure Defender for Cloud, AWS Security Hub, related cloud-native security tools
  • Container & Kubernetes Security: Kubernetes, Amazon EKS, Azure AKS, container runtime security, image scanning, admission controllers
  • Vulnerability Management: Tenable
  • SIEM & Monitoring: Splunk, Microsoft Sentinel, Amazon CloudWatch, AWS CloudTrail
  • EDR & Threat Protection: Microsoft Defender for Cloud, Microsoft Defender for Endpoint, Cisco AMP
  • Identity & Access: Microsoft Defender for Identity, Azure Active Directory
  • Data Loss Prevention: Code42, O365 DLP
• Familiarity with Microsoft 365 security and Azure security controls.
• Experience with AWS security tools and controls.
• Knowledge of TCP/IP, network protocols, and common attack vectors.
• Ability to interpret and analyze log data from various sources, including Kubernetes audit logs and container runtime logs.
• Understanding of incident response methodologies and frameworks (e.g., NIST, SANS).
• Knowledge of vulnerability management processes and remediation.
• Experience with scripting (Python) for automation and investigation is a plus.
• Excellent written and verbal communication skills.
• Ability to work in a fast-paced, 5x8 SOC environment.

Preferred Qualifications:

• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience.
• Relevant certifications (e.g., Security+, CEH, GCIA, GCIH, Azure Security Engineer, AWS Security Specialty, Certified Kubernetes Security Specialist (CKS) or Certified Kubernetes Administrator (CKA)).
• Experience with threat intelligence platforms (TIPs).
• Familiarity with regulatory frameworks (e.g., FedRAMP, GDPR, HIPAA, PCI-DSS, MITRE ATT&CK).
• Experience with SOAR platforms for orchestration and automation.
• Experience securing cloud-native applications, Kubernetes platforms (EKS, AKS), and containerized CI/CD pipelines.

About INSPYR Solutions
Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients’ business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.
 
INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, INSPYR Solutions complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities.

Information collected and processed through your application with INSPYR Solutions (including any job applications you choose to submit) is subject to INSPYR Solutions’ Privacy Policy and INSPYR Solutions’ AI and Automated Employment Decision Tool Policy: https://www.inspyrsolutions.com/policies/. By submitting an application, you are consenting to being contacted by INSPYR Solutions through phone, email, or text.