8 hours ago
Reston, VA, USASenior
Base Salary
$190k - $280k/yr
Responsibilities
- Serve as a security engineering subject-matter expert for containerized environments, service mesh technologies, and microservices.
- Design, implement, and manage security controls including image scanning, firewalls, intrusion detection and prevention, endpoint protection, encryption, runtime protection, RBAC, and network segmentation.
- Integrate security into CI/CD pipelines and DevSecOps workflows and support compliance with RMF, NIST SP 800-53, ICD 503, and FedRAMP requirements.
- Configure and optimize security monitoring and logging solutions, including container security tools such as Prisma Cloud.
- Monitor traffic, logs, alerts, and threat intelligence; investigate anomalies and breaches; and implement incident response plans.
- Conduct threat analysis, risk assessments, security assessments, vulnerability identification, and mitigation recommendations for platforms, microservices, and APIs.
- Collaborate with platform engineers, ISSOs, developers, IT, software development, and compliance teams to establish and enforce security policies and standards.
- Document security architectures, control implementations, configurations, monitoring strategies, incidents, findings, and remediation actions.
Requirements
- Active TS/SCI security clearance with CI Poly.
- Bachelor's degree in Computer Science, Information Security, or a related field.
- At least 7 years of cybersecurity engineering experience designing and implementing security controls and performing continuous monitoring and auditing.
- Hands-on experience implementing and validating security controls in containerized, Kubernetes, and DevSecOps IL5/IL6+ environments.
- Strong experience with NIST SP 800-53, RMF, ICD 503, FISMA, and FedRAMP.
- Experience implementing log collection and querying and analyzing aggregated logs in Splunk.
- Experience with Fortify, Acunetix, Prisma Cloud, or similar security tools.
- Proficiency in incident response, security incident handling, forensic analysis, and NIST Risk Management Framework continuous monitoring.
- Strong understanding of network protocols, operating systems, and infrastructure components.
Benefits
- Health, dental, and vision insurance.
- 401(k) retirement plan with company match.
- Paid time off and holidays.
- Parental leave and dependent care benefits.
- Flexible work arrangements.
- Professional development opportunities, including company-paid training and certifications.
- Employee assistance and wellness programs.
- Potential performance-based bonuses, referral bonuses, and other additional incentives.
Tech Stack
KubernetesSplunk
About MetroStar
MetroStar provides IT services and software solutions to U.S. federal civilian and defense agencies, focusing on digital transformation, AI/ML, application modernization, enterprise IT, and human-centered design. The company operates on government contracts to deliver secure systems and mission-support applications. Founded in 1999 and headquartered in Reston, Virginia, MetroStar is privately held and a portfolio company of Veritas Capital.