What are the responsibilities and job description for the Security Operations Engineer – Senior position at c3el?
**CONTINGENT UPON CONTRACT AWARD**
Overview:
Job Title: Security Operations Engineer – Senior
Location: Washington, DC
(Due to the nature of the work and contract requirements, U.S. Citizenship is required.)
Description:
C3EL is seeking a Senior Security Operations Engineer to support security initiatives in Washington, DC. This role is responsible for designing, implementing, and maintaining secure systems and ensuring the protection of organizational assets. The selected candidate will provide technical leadership across security architecture, risk management, and continuous monitoring efforts.
Responsibilities will include, but not be limited to:
- Design, implement, and maintain cybersecurity solutions aligned with industry frameworks (e.g., NIST, ISO 27001).
- Perform vulnerability assessments, security control reviews, and risk analyses.
- Monitor systems for security incidents and support incident response and remediation efforts.
- Develop and enforce security policies, procedures, and best practices.
- Configure and manage security tools (e.g., SIEM, IDS/IPS, endpoint protection).
- Collaborate with engineering teams to integrate security controls into system architectures.
- Conduct security audits and support continuous monitoring activities.
- Maintain security documentation, including system security plans and risk tracking.
- Provide technical guidance to junior cybersecurity staff.
Minimum Qualifications:
- U.S. Citizenship.
- Current IAT Level III or IAM Level II certification (e.g., CISSP, CASP CE, or equivalent).
- 8 years of experience in cybersecurity, information security, or a related field.
- Experience with risk management frameworks (e.g., RMF, NIST-based approaches).
- Experience with vulnerability assessment tools (e.g., Nessus or similar).
- Knowledge of security architecture and network security principles.
- Experience with security tools such as SIEM, IDS/IPS, and endpoint protection.
- Familiarity with Windows, Linux, and cloud environments (AWS, Azure, or similar).
- Strong analytical, troubleshooting, and communication skills.
Desired Qualifications:
- Experience in enterprise environments.
- Familiarity with compliance and risk tracking tools.
- Experience with Zero Trust concepts.
- Scripting or automation experience (e.g., Python, PowerShell).
- Experience with DevSecOps or container security.
Education:
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field preferred, OR an Associate’s degree plus ten (10) years of recent specialized experience, OR 12 years of recent specialized experience.