Senior Security Engineer

Evolver is an information technology, cybersecurity, and digital transformation company supporting national defense, federal civilian agencies, and Fortune 500 organizations. We help customers secure critical systems, modernize enterprise technology, and solve complex operational challenges through integrated technology capabilities spanning cybersecurity, enterprise IT infrastructure, cloud, software development, data analytics, legal technology and eDiscovery, applied AI, and electronic security systems. Our teams combine deep technical expertise with mission understanding to deliver secure, reliable, and scalable solutions that advance performance in high-stakes environments.

Evolver Federal is looking for a Senior Security Engineer to join our team supporting our federal client located onsite in Washington, DC

This position requires a hybrid work environment with onsite work 3-5 days per week in Washington, DC depending on the requirements of the program

The Senior Security Engineer provides expert-level cybersecurity engineering support across enterprise network, cloud, endpoint, identity, application, and data environments. This key personnel role advances Zero Trust initiatives and supports security operations, incident response, vulnerability management, compliance, documentation, and knowledge transfer.

Responsibilities

• Design, implement, and maintain cybersecurity solutions across network, cloud, endpoint, identity, application, and data environments.

• Advance Zero Trust Architecture in alignment with NIST SP 800-207 and applicable federal cybersecurity requirements.

• Administer enterprise firewalls, security policies, NAT, VPNs, IDS/IPS, application controls, threat prevention, logging, and upgrades.

• Engineer Network Access Control solutions including Cisco ISE, 802.1X, device profiling, posture validation, and segmentation policies.

• Operate and enhance Microsoft Sentinel, Defender for Endpoint, Defender for Identity, Defender for Cloud, and Defender for Cloud Apps.

• Onboard, normalize, and validate security telemetry; develop SIEM analytics, correlation rules, alerts, dashboards, workbooks, and automated responses.

• Lead incident-response activities including triage, scoping, log correlation, containment, evidence preservation, eradication, and recovery support.

• Coordinate vulnerability scanning, risk prioritization, patching, configuration remediation, exception tracking, and validation.

• Implement MFA, Conditional Access, RBAC, privileged access management, identity governance, and least-privilege controls.

• Assess and secure AWS IAM, VPCs, security groups, network ACLs, CloudTrail, VPC Flow Logs, and hybrid connections.

• Support audits, security assessments, plans of action and milestones, IRS safeguard requirements, FTI controls, and federal compliance activities.

• Develop security architecture diagrams, configuration baselines, playbooks, SOPs, risk records, and compliance evidence.

Basic Qualifications

• US. citizenship and an active Top Secret security, with the ability to pass a comprehensive background check.

• 10 years of senior-level experience securing enterprise network, cloud, identity, and security environments.

• 5 years of experience with routing and switching security, enterprise firewalls, IDS/IPS, VPN/ZTNA, DNS security, NAC, SIEM telemetry onboarding, vulnerability remediation, and incident-response triage.

• 5 years of experience integrating and validating security logs in Microsoft Sentinel or a comparable SIEM, including threat analysis, log correlation, containment, root cause analysis, and remediation coordination.

• 5 years of experience implementing privileged-access governance, MFA, RBAC, least privilege, and secure administrative practices.

• 5 years of experience supporting AWS network and cloud security, including VPCs, security groups, network ACLs, VPC Flow Logs, CloudTrail, hybrid routing, and secure on-premises-to-cloud integration.

Preferred Qualifications

• Bachelor's degree in information technology, cybersecurity, engineering, computer science, or a related field.

• Relevant certification such as CCSE, CISSP, CISM, Security+, CASP+, SC-200, AWS Security Specialty, or equivalent.

• AWS Advanced Networking Specialty or equivalent AWS/hybrid networking experience.

• Experience with Microsoft Sentinel log onboarding, normalization, alert tuning, dashboards, and telemetry validation.

• Experience with Zero Trust architecture, Conditional Access, privileged access management, endpoint security, and security operations support.

Evolver is an equal opportunity employer and welcomes all job seekers. It is the policy of Evolver not to discriminate based on race, color, ancestry, religion, gender, age, national origin, gender identity or expression, sexual orientation, genetic factors, pregnancy, physical or mental disability, military/veteran status, or any other factor protected by law.

Actual salary will depend on factors such as skills, qualifications, experience, market and work location. Evolver offers competitive benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies.