1 day ago
Reston, VA, USASenior
Base Salary
$190k - $250k/yr
Responsibilities
- Serve as a security engineering subject matter expert for containerized environments, service mesh technologies, and microservices.
- Design, implement, and manage security controls including image scanning, firewalls, intrusion detection and prevention, endpoint protection, encryption, runtime protection, RBAC, and network segmentation.
- Integrate security into CI/CD pipelines and DevSecOps workflows while supporting RMF, NIST SP 800-53, ICD 503, and FedRAMP compliance.
- Configure and optimize security monitoring and logging solutions, including container security tools such as Prisma Cloud.
- Monitor network traffic, system logs, security alerts, and threat intelligence feeds; investigate anomalies, vulnerabilities, and security incidents.
- Develop and implement incident response plans and perform incident handling and forensic analysis.
- Conduct security assessments of container orchestration platforms, microservices, APIs, systems, networks, and applications.
- Collaborate with platform engineers, ISSOs, developers, IT, software development, and compliance teams to embed security throughout the system lifecycle.
- Maintain security architecture, control implementation, configuration, monitoring documentation, and detailed security reports.
Requirements
- Active TS/SCI security clearance with CI Poly.
- CISSP or equivalent certification supporting DoD 8140 requirements.
- Bachelor’s degree in Computer Science, Information Security, or a related field.
- At least 7 years of cybersecurity engineering experience designing and implementing security controls and continuous monitoring and auditing solutions.
- Strong experience with NIST SP 800-53, RMF, ICD 503, FISMA, and FedRAMP.
- Experience specifying and implementing log collection with Splunk and analyzing aggregated logs for security-relevant anomalies and risks.
- Experience with Fortify, Acunetix, Prisma Cloud, or similar security tools.
- Proficiency in incident response, security incident handling, and forensic analysis techniques.
- Hands-on experience implementing and validating security controls in containerized, Kubernetes, and DevSecOps IL5/IL6+ environments.
- Experience performing periodic security checks aligned with the NIST Risk Management Framework.
- Strong understanding of network protocols, operating systems, and infrastructure components.
- Effective communication skills for technical and non-technical stakeholders.
Benefits
- Health, dental, and vision insurance.
- 401(k) retirement plan with company match.
- Paid time off and holidays.
- Parental leave and dependent care support.
- Flexible work arrangements.
- Professional development opportunities, including company-paid training and certifications.
- Employee assistance and wellness programs.
- Potential performance-based, referral, and additional bonuses.
- Applications are accepted on a rolling basis until the position is filled.
Tech Stack
KubernetesSplunk
Categories
About MetroStar
MetroStar provides IT services and software solutions to U.S. federal civilian and defense agencies, focusing on digital transformation, AI/ML, application modernization, enterprise IT, and human-centered design. The company operates on government contracts to deliver secure systems and mission-support applications. Founded in 1999 and headquartered in Reston, Virginia, MetroStar is privately held and a portfolio company of Veritas Capital.