Qualifications

• 5+ years of security engineering experience in a FedRAMP or FISMA Moderate system within an AWS GovCloud environment.
• Hands-on experience with UiPath architecture, including Orchestrator and both attended and unattended robots.
• Proficient in designing and implementing service account models and credential vaulting.
• Experience applying NIST SP 800-53 Rev 5 Moderate controls within access control, audit, configuration management, identity authentication, and system configuration domains.
• Skilled in STIG/CIS hardening, vulnerability scanning, and patch management.
• Understanding of secure SDLC practices and reviewing automation workflows.
• Strong ability to communicate engineering decisions in terms understood by the Authorization & Accreditation (A&A) team.

Responsibilities

• Monitor systems for unusual activities and security threats.
• Analyze alerts to differentiate real threats from false positives and categorize incidents based on risk.
• Lead incident response efforts including containment, recovery, and documenting post-incident analyses.
• Optimize detection capabilities by refining alerts and integrating new data sources to minimize false positives.
• Compile detailed reports on incident trends and overall security posture for stakeholders.
• Participate actively in team discussions and cross-department meetings to address security concerns.

Benefits

• Remote work flexibility with preference for candidates local to Herndon, VA, requiring onsite presence 4 days a week for local hires.