Senior Security Engineer

Gormat is a company focused on cybersecurity, and they are seeking a Senior Security Engineer to design, implement, and maintain security infrastructure. The role involves ensuring the security of enterprise systems and data while collaborating with various teams to align security initiatives with business goals.

Responsibilities:

• Provide architectural and design oversight to ensure enterprise security requirements are met across all systems
• Serve as a Subject Matter Expert on enterprise security architecture and ensure designs align with mission, business, and compliance requirements
• Translate organizational security goals into technical requirements for infrastructure and applications
• Evaluate enterprise cybersecurity architecture effectiveness and recommend improvements
• Oversee the deployment, configuration, and management of enterprise security platforms, including SIEM, IDS/IPS, logging, UAM, EDR, SOAR, Elastic Search, and encryption technologies
• Assess, test, select, and integrate security tools with an emphasis on scalability and automation
• Conduct security testing and evaluation for new platforms and integrations
• Perform vulnerability scanning, analysis, and reporting to identify enterprise security weaknesses
• Recommend mitigations and track remediation efforts across teams
• Ensure effective system hardening, patch management, and configuration management practices
• Collaborate with SOC and Incident Response teams to triage, investigate, and mitigate threats
• Identify anomalous activity and potential threats using logs, network data, and defensive tools
• Develop and refine content for SIEM and cyber defense platforms
• Create dashboards and reports that improve visibility into the organization's security posture
• Build and maintain automated scripts and processes for monitoring, alerting, and remediation
• Perform health checks on systems, applications, and security services to ensure availability
• Recommend emerging technologies to improve detection and response capabilities
• Oversee enterprise ICAM implementations, including multi-factor authentication and least privilege models
• Provide expertise on authentication and authorization protocols such as SAML, OAuth2, and PKI
• Ensure compliance with NIST, ISO 27001, FedRAMP, HIPAA, and other applicable frameworks
• Develop and enforce security policies, STIGs, and hardening guidelines
• Provide documentation, audit support, and compliance reporting to leadership
• Collaborate with developers and system architects to integrate security into the systems development lifecycle
• Conduct security reviews, testing, and evaluations during system development and release cycles
• Maintain protected repositories of technical documentation, artifacts, and system configurations
• Provide training and security awareness sessions for technical teams and stakeholders
• Collaborate with IT, DevOps, and Engineering teams to integrate security into daily operations

Requirements:

• Bachelor's degree in Information Technology, Cybersecurity, Data Science, Information Systems, Computer Science, or a related field from an ABET-accredited or CAE-designated institution
• Minimum of six (6) years of experience in Information Technology (IT) and/or Information Security (IS)
• Must possess at least one DoD 8140 certification applicable to the role or obtain certification within six (6) months of onboarding
• Must maintain required DoD 8140 certification(s) throughout employment
• Must be able to successfully complete a DEA background investigation
• Must possess an active Secret clearance (or higher) and be eligible to obtain a Top Secret clearance if required
• Advanced certifications aligned with DCWF Roles 521, 461, 651, or 622, including: ISC2: CISSP-ISSAP, CISSP-ISSEP, CCSP, CSSLP, SSCP; EC-Council: CEH; GIAC: GCIA, GCLD, GICSP, GCSA, GSNA, GDSA, GFACT, GISF, GSEC; CompTIA: CySA+, PenTest+, Security+, SecurityX/CASP+
• In-depth knowledge of SIEM platforms, scripting languages (Python, SPL, KQL), network security, and threat intelligence
• Hands-on experience with Splunk, Elastic Search, and ServiceNow
• Experience with APIs, webhooks, and custom queries for data ingestion
• Strong cloud security experience in multi-cloud enterprise environments (AWS and/or Azure)
• Experience migrating applications to cloud environments and implementing cloud security controls
• Experience across the DevOps lifecycle, including orchestration, configuration management, CI/CD, monitoring, and security
• Experience using automation and orchestration technologies such as GitHub Actions, Jenkins, CircleCI, Ansible, Azure DevOps, GitLab CI, and Bitbucket Pipelines
• Scripting and automation experience using PowerShell, Azure CLI, or similar technologies