Security Engineer

Security Engineer

Location: Herndon, VA (Remote Possible)
Duration: 6 Months Contract
Employment Type: Contract
Clearance: Must be able to obtain/maintain required government suitability
Environment: AWS GovCloud | FedRAMP | FISMA Moderate | UiPath

Responsibilities:
Monitor systems for abnormal activity.
Analyze alerts, distinguish threats from false positives, and categorize incidents by risk.
Lead incident response: containment, eradication, recovery, post-incident analysis, and documenting steps.
Optimize detection capabilities: refine alert thresholds, tune SIEM rules, integrate new data sources, and reduce false positives.
Compile weekly/monthly reports on incident trends, threat activity, and security posture for internal stakeholders.
Actively participate in team meetings, client reviews, and cross-departmental syncs.

Required Skills:
5+ years of security engineering experience for a FedRAMP or FISMA Moderate system in an AWS GovCloud environment.
Hands-on UiPath architecture experience: Orchestrator, attended/unattended robots, Assets and Credential Stores, queues, and robot host builds.
Design and implementation of service account models, credential vaulting, RBAC, separation of duties, and session/audit logging.
Applied NIST SP 800-53 Rev. 5 Moderate controls in build decisions across the AC, AU, CM, IA, and SC families.
STIG/CIS hardening, vulnerability scanning, patch and configuration management.
Secure SDLC and code review of automation workflows and scripts.
Ability to translate engineering decisions into control language for the A&A team.