2 days ago
Reston, VA, USASenior
Base Salary
$190k - $280k/yr
Responsibilities
- Design, implement, and manage security controls for containerized workload solutions.
- Integrate security into CI/CD pipelines and DevSecOps workflows while supporting RMF, NIST SP 800-53, ICD 503, and FedRAMP compliance.
- Assess container orchestration platforms, microservices, and APIs for vulnerabilities and recommend mitigations.
- Monitor threat intelligence, conduct threat and risk analysis, and identify emerging vulnerabilities.
- Establish and enforce security policies, standards, and procedures across the system lifecycle.
- Monitor logs, network traffic, and security alerts; investigate anomalies and breaches; and implement incident response plans.
- Document security architectures, control procedures, configurations, continuous monitoring strategies, findings, and incidents.
Requirements
- Active TS/SCI security clearance with CI Poly.
- Bachelor’s degree in Computer Science, Information Security, or a related field.
- At least 7 years of experience as a platform engineer, SecOps engineer, ISSE, or cybersecurity engineer focused on security controls, continuous monitoring, and compliance.
- Experience with NIST SP 800-53, RMF, ICD 503, FISMA, and FedRAMP.
- Hands-on experience implementing and validating security controls within containers and clusters.
- Experience with incident response, security incident handling, forensic analysis, and RMF-aligned continuous monitoring.
- Strong Splunk log collection, querying, and analysis skills.
- Experience with Fortify, Acunetix, and Prisma Cloud.
- Strong understanding of network protocols, operating systems, and infrastructure components.
Benefits
- Health, dental, and vision insurance.
- 401(k) retirement plan with company match.
- Paid time off and holidays.
- Parental leave and dependent care.
- Flexible work arrangements.
- Professional development opportunities, including company-paid training and certifications.
- Employee assistance and wellness programs.
- Potential performance-based, referral, and other additional compensation.
Tech Stack
Splunk
Categories
About MetroStar
MetroStar provides IT services and software solutions to U.S. federal civilian and defense agencies, focusing on digital transformation, AI/ML, application modernization, enterprise IT, and human-centered design. The company operates on government contracts to deliver secure systems and mission-support applications. Founded in 1999 and headquartered in Reston, Virginia, MetroStar is privately held and a portfolio company of Veritas Capital.