{"id":2378332,"url":"https://alion.io/job/acuity-security-engineer","title":"Security Engineer","company":{"id":4409311,"name":"Acuity","domain":"myacuity.com","url":"https://alion.io/company/acuity-4","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":111000,"max_usd":215000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1245},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Checkmarx","optional":false},{"name":"Configuration Management","optional":false},{"name":"Fortify","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Sonatype Nexus IQ","optional":false},{"name":"Splunk","optional":false},{"name":"Terraform","optional":false},{"name":"Veracode","optional":false},{"name":"VMWare","optional":false},{"name":"Windows Server","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-12T18:59:14Z","employer_posted_date":"2026-10-12","last_verified_at":"2026-10-17T05:19:30Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Overview\nLooking to make a difference and help protect critical government missions? Join Acuity's team of cybersecurity professionals supporting the U.S. Department of State. As a Security Engineer you will help secure enterprise infrastructure and cloud environments through continuous monitoring, vulnerability management, secure configuration and STIG enforcement, ATO sustainment, cloud security posture management, Zero Trust implementation, incident response, and compliance with federal cybersecurity standards. This role partners closely with system administrators, cloud and infrastructure engineers, security analysts, and government stakeholders to strengthen the organization's security posture while supporting modernization initiatives. The position is centered on infrastructure and cloud security rather than application-development security, while maintaining enough application security awareness to collaborate effectively across the broader Department of State security ecosystem.\nWhy Acuity?\nAre you ready to use your expertise in the areas of IT Modernization, Data Enablement, and Hyperautomation to make a real difference? Join Acuity, Inc., a technology consulting firm that supports federal agencies. We combine industry partnerships and long-term federal experience with innovative technical leadership to support our customers’ critical missions.Responsibilities\nAdminister and support infrastructure and cloud security technologies, including Microsoft Defender for Cloud, Microsoft Purview, SCUBA, Rapid7, Tenable, ScienceLogic, and comparable enterprise security platforms.\nSupport continuous monitoring and infrastructure security operations across servers, virtual machines, cloud platforms, networked systems, and enterprise services; identify security findings and coordinate remediation with infrastructure and operations teams.\nPerform security assessments, vulnerability analysis, risk assessments, and security control validation in accordance with NIST RMF and Department of State security requirements.\nSupport continuous monitoring, iPost activities, security compliance, documentation, audit readiness, and ATO sustainment for enterprise systems.\nAdminister and support security technologies for vulnerability management, cloud security posture management, identity and access management (IAM), configuration management, system hardening, and security monitoring.\nConduct and support enterprise vulnerability management using tools such as Tenable, Rapid7, Microsoft Defender for Cloud, and comparable platforms; track findings through remediation and validation.\nSupport security incident response and remediation activities in accordance with NIST SP 800-61 and applicable Department of State guidance, coordinating with Security Operations Center (SOC) personnel as needed.\nReview system configurations, STIGs, security baselines, and access controls to ensure compliance with least-privilege principles, Department of State requirements, and federal cybersecurity standards.\nSupport security monitoring of enterprise environments including Windows Server, VMware ESXi, VMware vCenter, Active Directory, cloud platforms, virtualized infrastructure, and associated enterprise services using tools such as ScienceLogic and other monitoring platforms.\nMaintain working familiarity with Department of State application security and code-scanning capabilities, including Fortify and comparable SAST/DAST/SCA tools, to understand application-related findings, dependencies, and interfaces with infrastructure security; hands-on administration of these tools is not the primary focus of this role.\nAssist with implementation and monitoring of security controls across cloud, network, and infrastructure environments, including cloud security posture management and Zero Trust initiatives.\nCollaborate with system administrators, cloud and infrastructure engineers, security analysts, project teams, and business stakeholders to identify risks, recommend security improvements, and resolve technical issues.\nPrepare and maintain technical documentation, security procedures, risk assessments, remediation plans, Plan of Action and Milestones (POA&Ms), ATO/compliance artifacts, and continuous monitoring documentation.\nPerform additional duties as assigned in support of customer mission objectives. \nQualifications\nBachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field (or equivalent experience). \nMinimum of five (5) years of experience in cybersecurity engineering, infrastructure security, cloud security, security operations, or information assurance.\nHands-on experience with enterprise infrastructure, vulnerability management, cloud security, or security monitoring tools such as Microsoft Defender for Cloud, Microsoft Purview, SCUBA, Rapid7, Tenable, ScienceLogic, Splunk, Microsoft Sentinel, or comparable technologies.\nExperience supporting enterprise vulnerability management, continuous monitoring, system hardening, STIG enforcement, security finding remediation, and infrastructure security operations.\nExperience working with NIST SP 800-53, Risk Management Framework (RMF), FISMA, and Department of State or comparable federal cybersecurity policies and requirements.\nExperience supporting vulnerability management and security monitoring solutions such as Tenable, Rapid7, Microsoft Defender for Cloud, ScienceLogic, Splunk, Microsoft Sentinel, or comparable enterprise platforms.\nExperience with Identity and Access Management (IAM), Active Directory, Windows Server, VMware or other virtualized infrastructure, and enterprise system hardening.\nExperience supporting security incident response, continuous monitoring, ATO sustainment, compliance initiatives, and remediation tracking.\nWorking knowledge of cloud security principles and cloud security posture management across Azure, AWS, or hybrid cloud environments.\nExperience implementing or supporting Zero Trust security principles across enterprise infrastructure and cloud environments.\nWorking knowledge of application security concepts and tools such as Fortify, OWASP ZAP, Veracode, Checkmarx, Sonatype, or comparable technologies sufficient to collaborate with application security and development teams; deep application security engineering or code-scanning specialization is not required.\nFamiliarity with automation and infrastructure technologies such as PowerShell, Python, Ansible, Terraform, Azure DevOps, or comparable tools used to support secure infrastructure operations.\nUnderstanding of network security, endpoint/server security, vulnerability remediation, configuration compliance, and security monitoring in enterprise environments.\nStrong analytical, troubleshooting, communication, documentation, and customer service skills. \nAbility to work independently while collaborating effectively across technical and non-technical teams. \nPreferred Qualifications\nActive cybersecurity certification such as CISSP, CCSP, Security+, CISM, CISA, CEH, Cloud+, or comparable DoD 8140-approved certification. \nExperience supporting the U.S. Department of State or other federal civilian agencies. \nExperience implementing Zero Trust architecture, cloud security posture management, and secure-by-design principles in federal or enterprise environments.\nFamiliarity with Fortify or other application security testing platforms used within Department of State environments is a plus, particularly where application findings intersect with infrastructure, cloud, configuration, or vulnerability remediation activities.\nFamiliarity with Department of State iPost, STIG compliance, ATO sustainment, F5, Palo Alto, or other enterprise network and infrastructure security technologies.\nClearance Requirement\nActive Secret or Top Secret security clearance required.\nMin\nUSD $115,000.00/Yr.Max\nUSD $160,000.00/Yr.Salary Range\nThe salary range for this position represents Acuity's good faith estimate of the compensation for this job title at the time of posting. Final compensation will be determined based on factors including, but not limited to, the candidate's qualifications, experience, education, certifications, skills, geographic location, contract requirements, applicable labor categories, and, where applicable, contract award and funding.","description_format":"text","description_chars":8311,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["National Security","Information Security","IT Consulting & Digital Transformation","Homeland Security"],"lifecycle":[{"event":"open","at":"2026-10-12T18:59:14Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":38,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/acuity-security-engineer","json_url":"https://alion.io/job/acuity-security-engineer.json","meta":{"generated_at":"2026-10-17T06:36:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8929,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4409311},"rest":"https://alion.io/mcp/rest/get_company?id=4409311"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Facuity-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Facuity-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Facuity-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/acuity-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Facuity-security-engineer"}]}