Senior Cybersecurity Engineer

About the role

Redhorse Corporation presents a distinct professional opportunity for experienced engineers dedicated to national critical infrastructure. This organization delivers data insights and technology solutions to U.S. government clients whose missions are of the highest importance. The current opening seeks a Senior Cybersecurity Engineer specifically tasked with the protection and defense of essential enterprise and mission-focused IT infrastructures. Success in this role requires a professional capable of operating as a trusted advisor who navigates complex technical and policy landscapes with precision. The candidate must construct technology-agnostic solutions while providing direct support to clients managing difficult and sensitive operational requirements that demand discretion and reliability.

The position is central to Redhorse's objective of modernizing how government entities utilize data and technology to serve public interest. Incumbents will operate at the intersection of policy and execution, translating regulatory frameworks into actionable technical controls. They will ensure that the data and technological systems underpinning sensitive national missions maintain resilience against persistent and evolving threats from both foreign and domestic actors. The scope of work involves securing complex environments that span multiple classification levels, requiring a deep understanding of compartmentalized information handling. Professionals in this role will directly influence the security posture of both cloud-based platforms and classified operational enclaves, ensuring continuity of operations.

Location and Engagement

The designated work location for this role is Chantilly, Virginia, which serves as the primary site for engagement activities. The engagement structure is established as a proposal-based contract, requiring responsiveness to statement of work requirements. The proposed compensation package is valued at $183,929.00 per year, providing competitive remuneration for the scope of responsibility. The contractual term extends through 2026, offering potential for renewal based on performance and evolving mission needs.

What you'll do

• Conduct comprehensive analysis of existing network topologies to map infrastructure boundaries and identify vulnerabilities before the initiation of new construction projects.
• Design and implement segmented network architectures that enforce granular access control rules for cloud environments and secure operational zones.
• Perform continuous examination of system logs and security alerts to maintain vigilance and enable proactive threat detection.
• Coordinate effective incident response actions in collaboration with dedicated response teams to manage security events efficiently.
• Refine detection algorithms based on empirical evidence gathered during real-world incident handling and routine monitoring activities.
• Ensure the implementation of security controls strictly adheres to demanding government classification standards for data integrity and access.
• Verify on an ongoing basis that system configurations align with established security benchmarks and defense-in-depth principles.
• Execute timely adjustments to reduce identified risk vectors, prioritizing remediation based on impact and exploitability.
• Facilitate knowledge transfer sessions to educate personnel on secure operational procedures and best practices.
• Ensure daily activities consistently follow organizational security standards through reinforcement and guidance.
• Track vendor-supplied updates and security patches, maintaining awareness of emerging vulnerabilities.
• Test and apply these updates within defined operational limits to maintain system integrity without disrupting critical services.

Requirements

Candidates must currently hold a baseline security clearance, demonstrating an understanding of the trust required for access to sensitive information. The ability to obtain and maintain a Top Secret clearance is a non-negotiable requirement for this position, necessitating a thorough background investigation. Acceptance of responsibility for the protection of critical infrastructure is mandatory for consideration, reflecting a commitment to public service. Applicants need documented experience managing complex multi-classification systems within live operational settings, proving capability in diverse security contexts. A proven track record of defending cloud-native environments against sophisticated malicious activity is essential, showcasing resilience and technical acumen. Demonstrated expertise with security frameworks and their implementation guidance is a prerequisite for successful performance in this role, ensuring alignment with industry standards.

Nice to have

While not mandatory, experience with security orchestration tools is advantageous for streamlining response activities and improving efficiency. Proficiency in these specific tools, if mentioned in the official posting, is considered a preferred qualification that enhances operational capability.