Security Engineering Lead

Summary

Agile Defense is seeking experienced Security Engineering Lead to support an enterprise cybersecurity program delivering 24/7 Cybersecurity Operations Center (CSOC) services. This role serves as the technical lead for SOC security engineering and modernization efforts, including the integration and sustainment of SIEM, SOAR, EDR, and IDS/IPS platforms.

Responsibilities include ensuring compliance with established standards, optimizing system performance, and driving continuous improvement across the enterprise security architecture. A highly technical self-starter with excellent analytical and problem-solving skills, flexibility, good judgment and the ability to coordinate multiple, concurrent tasks in an effective manner.

Job Duties and Responsibilities

• Engineer, integrate, and maintain CSOC capabilities and platforms, ensuring effective configuration management and performance optimization.
• Advance Zero Trust principles, automation, and telemetry coverage across both cloud and on-premises environments.
• Assess and test emerging technologies; develop comprehensive technical reports and implementation plans to support modernization initiatives.

Qualifications

Required Certifications

• Minimum required A+, Security+ or Network+; CISSP certification.
• Education, Background, and Years of Experience
• Bachelor's Degree

Additional Skills & Qualifications

Required Skills

• A minimum of 3 years’ experience security administration systems and support.
• Strong working knowledge of Security Services, Networking, Security Policy, and Consulting.

Proven experience in installing, configuring, monitoring, and troubleshooting network security solutions and related monitoring tools including Layer 2 / Layer 3 network devices, Network Admission Control (NAC), 802.1x, Firewalls, IDS / IPS, VPN Solutions, Web Application Firewalls, Content Filtering, fault analysis.

• Advanced working knowledge of encryption algorithms, Operating Systems (Linux, windows), secure communications, SIEM technologies, and embedded systems security.
• Advanced working knowledge of network and data communication protocols.

Familiar with standard concepts, practices, and procedures within a particular field such as NIST, FISMA and Common Criteria regulations and standards. Experience with Network based IDS / IPS technologies and affiliated modes of operation; experienced in evaluating new technologies and processes that enhance security capabilities.

Supervise changes in software, hardware, facilities, telecommunications and user needs.

Experience with Test security solutions using industry standard analysis criteria; experience with the delivery technical reports and formal papers on test findings; experience responding to information security issues during each stage of a project’s lifecycle to include. Strong scripting skills (bash PowerShell) and ability to use automation tools such as ansible, or puppet. Produce technical documentation, including architecture diagrams, and detailed root cause analysis reports.

Preferred Skills

• CISSP certification
• Experience with supporting Zero Trust
• Network and Operating Certifications (Cisco, Redhat, Microsoft)

• Cloud provider certifications (AWS Certified Solutions Architect, Azure Solutions Architect Expert, etc)
• Excellent written and oral communication skills

Working Conditions

• Environmental Conditions
• Hybrid in Reston, VA
• Strength Demands

Physical Requirements