2 days ago
Reston, VA, USASenior
Base Salary
$190k - $280k/yr
Responsibilities
- Serve as a security engineering SME for containerized environments, service meshes, and microservices.
- Design, implement, and manage security controls including image scanning, firewalls, intrusion detection and prevention, endpoint protection, encryption, runtime protection, RBAC, and network segmentation.
- Integrate security into CI/CD pipelines and DevSecOps workflows and support RMF, NIST SP 800-53, ICD 503, and FedRAMP compliance.
- Configure security monitoring and logging solutions, including container security tools such as Prisma Cloud.
- Monitor traffic, logs, alerts, and threat intelligence; investigate anomalies and breaches; and implement incident response plans.
- Conduct threat analysis, risk assessments, security assessments, vulnerability identification, and mitigation recommendations.
- Collaborate with platform engineers, ISSOs, developers, IT, software development, and compliance teams to establish and enforce security policies and procedures.
- Maintain security architecture and control documentation and prepare reports on findings, incidents, and remediation actions.
Requirements
- Active TS/SCI security clearance with CI Poly.
- CISSP or equivalent certification supporting DoD 8140 requirements.
- Bachelor’s degree in Computer Science, Information Security, or a related field.
- At least 7 years of cybersecurity engineering experience designing and implementing security controls and continuous monitoring and auditing solutions.
- Strong experience with NIST SP 800-53, RMF, ICD 503, FISMA, and FedRAMP.
- Experience specifying log collection and querying aggregated logs in Splunk.
- Experience with Fortify, Acunetix, Prisma Cloud, or similar security tools.
- Proficiency in incident response, security incident handling, and forensic analysis.
- Hands-on experience implementing and validating controls in containerized, Kubernetes, and DevSecOps IL5/IL6+ environments.
- Experience performing periodic security checks aligned with the NIST Risk Management Framework.
- Strong understanding of network protocols, operating systems, and infrastructure components.
- Effective communication with technical and non-technical stakeholders.
Benefits
- Health, dental, and vision insurance.
- 401(k) retirement plan with company match.
- Paid time off and holidays.
- Parental leave and dependent care.
- Flexible work arrangements.
- Professional development opportunities, including company-paid training and certifications.
- Employee assistance and wellness programs.
- Performance-based bonuses, referral bonuses, and possible additional incentives.
- Applications are accepted on a rolling basis until the position is filled.
Tech Stack
KubernetesSplunk
Categories
About MetroStar
MetroStar provides IT services and software solutions to U.S. federal civilian and defense agencies, focusing on digital transformation, AI/ML, application modernization, enterprise IT, and human-centered design. The company operates on government contracts to deliver secure systems and mission-support applications. Founded in 1999 and headquartered in Reston, Virginia, MetroStar is privately held and a portfolio company of Veritas Capital.