2 days ago
Reston, VA, USASenior
Base Salary
$190k - $280k/yr
Responsibilities
- Serve as the security engineering subject matter expert for containerized environments, service mesh technologies, and microservices.
- Design, implement, and manage container security controls including image scanning, firewalls, intrusion detection and prevention, endpoint protection, encryption, runtime protection, RBAC, and network segmentation.
- Integrate security into CI/CD pipelines and DevSecOps workflows while supporting RMF, NIST SP 800-53, ICD 503, and FedRAMP compliance.
- Configure and optimize security monitoring and logging solutions, including container security tools such as Prisma Cloud.
- Monitor traffic, logs, alerts, and threat intelligence; investigate anomalies and breaches; and execute incident response and mitigation activities.
- Conduct threat analysis, risk assessments, security assessments, vulnerability reviews, and continuous monitoring for Kubernetes platforms, microservices, APIs, and containerized environments.
- Collaborate with platform engineers, ISSOs, developers, IT, software development, and compliance teams to establish and enforce security policies and standards.
- Maintain security architecture and control documentation and prepare reports on findings, incidents, and remediation actions.
Requirements
- Active TS/SCI security clearance with CI Poly.
- CISSP or equivalent certification supporting DoD 8140 requirements.
- Bachelor’s degree in Computer Science, Information Security, or a related field.
- At least 7 years of cybersecurity engineering experience designing and implementing security controls and continuous monitoring, including experience with NIST SP 800-53, RMF, ICD 503, FISMA, or FedRAMP.
- Experience specifying and implementing log collection with Splunk and analyzing aggregated logs for security anomalies or risks.
- Experience with Fortify, Acunetix, Prisma Cloud, or similar security tools.
- Proficiency in incident response, security incident handling, and forensic analysis.
- Hands-on experience implementing and validating controls in containerized, Kubernetes, and DevSecOps IL5/IL6+ environments.
- Experience performing periodic security checks aligned with the NIST Risk Management Framework.
- Strong understanding of network protocols, operating systems, and infrastructure components.
- Ability to communicate complex technical concepts to technical and non-technical stakeholders.
Benefits
- Health, dental, and vision insurance.
- 401(k) retirement plan with company match.
- Paid time off and holidays.
- Parental leave and dependent care benefits.
- Flexible work arrangements.
- Professional development opportunities, including company-paid training and/or certifications.
- Employee assistance and wellness programs.
- Potential performance-based, referral, and other additional compensation.
Tech Stack
KubernetesSplunk
Categories
About MetroStar
MetroStar provides IT services and software solutions to U.S. federal civilian and defense agencies, focusing on digital transformation, AI/ML, application modernization, enterprise IT, and human-centered design. The company operates on government contracts to deliver secure systems and mission-support applications. Founded in 1999 and headquartered in Reston, Virginia, MetroStar is privately held and a portfolio company of Veritas Capital.