Job description

Clear Creek Federal is part of the Seneca Nation Group (SNG) portfolio of companies. SNG is Seneca Holdings' federal government contracting business that meets mission-critical needs of federal civilian, defense, and intelligence community customers. Our portfolio comprises multiple subsidiaries that participate in the Small Business Administration 8(a) program. To learn more about SNG, visit the website and follow us on LinkedIn . Our team of talented individuals is what makes us successful. To support our team, we provide a balanced mix of benefits and programs. Your total rewards package includes competitive pay, benefits, and perks, flexible work-life balance, professional development opportunities, and performance and recognition programs. We offer a comprehensive benefits package that includes medical, dental, vision, life, and disability, voluntary benefit programs (critical illness, hospital, and accident), health savings and flexible spending accounts, and retirement 401K plan. One of our fundamental principles is to offer competitive health and welfare benefits to our team members, providing coverage and care for you and your family. Full-time employees working at least 30 hours a week on a regular basis are eligible to participate in our benefits and paid leave programs. We pride ourselves on our collaborative work environment and culture, which embraces our mission of providing financial and non-financial benefits back to the members of the Seneca Nation. Clear Creek Federal is seeking a highly skilled and experienced Security Engineer to join our team, in Washington, D.C. The successful candidate will be responsible for ensuring the security and integrity of systems, networks, and data across the enterprise. The ideal candidate will possess extensive hands-on experience in security engineering, Risk Management Framework (RMF) implementation, and Security Configuration Management (SCM) tools such as Tripwire and CyberArk. This role is a senior individual contributor position with no direct people-management responsibilities. Currently, this position is offered as a Hybrid Role, with 2 days remote. At any time, the client may ask all workforce to be 100% onsite. Responsibilities include, but are not limited to: Implement and manage security measures in accordance with RMF guidelines. Utilize Tripwire, CyberArk, and other SCM tools to maintain secure system configurations. Configure, maintain, and troubleshoot security platforms and supporting infrastructure. Implement and manage IDS/IPS capabilities and perform vulnerability assessments. Configure and manage firewall and network security controls. Apply identity and access management principles to secure systems and data. Support application security initiatives and data protection requirements. Conduct security assessments and support A&A activities. Monitor, analyze, and respond to cybersecurity threats and vulnerabilities. Collaborate with engineers, administrators, and stakeholders to remediate security risks. Ensure compliance with security policies, procedures, and regulatory requirements. Document security configurations, assessments, and remediation activities. Qualifications: IDS/IPS, penetration testing, and vulnerability assessment in virtualized Windows environments. Firewall administration and intrusion detection/prevention technologies. Tripwire, CyberArk, and other SCM tools. Windows Active Directory (AD). Virtual machine encryption technologies. Identity and access management principles. Application security and data-at-rest encryption. Secure network architectures. Information Assurance Assessment and Authorization (A&A) processes. Knowledge of APTs, phishing, social engineering, NAC, and anti-malware technologies. U.S. Citizen; Top-Secret Clearance. Skills Strong technical cybersecurity expertise. Excellent analytical and problem-solving skills. Strong written and verbal communication skills. Ability to work independently with minimal supervision. Ability to collaborate effectively across technical teams. Ability to manage multiple priorities under pressure. Equal Opportunity Statement: Seneca Holdings provides equal employment opportunities to all employees and applicants without regard to race, color, religion, sex/gender, sexual orientation, national origin, age, disability, marital status, genetic information and/or predisposing genetic characteristics, victim of domestic violence status, veteran status, or other protected class status. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leave of absence, compensation and training. The Company also prohibits retaliation against any employee who exercises his or her rights under applicable anti-discrimination laws. Notwithstanding the foregoing, the Company does give hiring preference to Seneca or Native individuals. Veterans with expertise in these areas are highly encouraged to apply.

Requirements

Must-haves

Currently, this position is offered as a Hybrid Role, with 2 days remote. At any time, the client may ask all workforce to be 100% onsite.
Responsibilities include, but are not limited to:
Implement and manage security measures in accordance with RMF guidelines.
Utilize Tripwire, CyberArk, and other SCM tools to maintain secure system configurations.
Configure, maintain, and troubleshoot security platforms and supporting infrastructure.
Implement and manage IDS/IPS capabilities and perform vulnerability assessments.
Configure and manage firewall and network security controls.
Apply identity and access management principles to secure systems and data.
Support application security initiatives and data protection requirements.
Conduct security assessments and support A&A activities.
Monitor, analyze, and respond to cybersecurity threats and vulnerabilities.
Collaborate with engineers, administrators, and stakeholders to remediate security risks.
Ensure compliance with security policies, procedures, and regulatory requirements.
Document security configurations, assessments, and remediation activities.
IDS/IPS, penetration testing, and vulnerability assessment in virtualized Windows environments.
Firewall administration and intrusion detection/prevention technologies.
Tripwire, CyberArk, and other SCM tools.
Windows Active Directory (AD).
Virtual machine encryption technologies.
Identity and access management principles.
Application security and data-at-rest encryption.
Secure network architectures.
Information Assurance Assessment and Authorization (A&A) processes.
Knowledge of APTs, phishing, social engineering, NAC, and anti-malware technologies.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

rest

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Professional Development