Security Engineer (Cross-Functional) - SME
Confirmed on the employer's own hiring board on Nov 14, 2026. First seen by Alion on Nov 13, 2026. Fantom Corporation scores B on the Alion truth index.
Fantom Corporation is a mission-focused organization supporting critical programs across the defense and intelligence community. We partner with our customers to deliver high-impact technical solutions while fostering a culture built on trust, expertise, and long-term career growth.
Must possess an active Top Secret Clearance
Must be willing and able to obtain a polygraph
Education: Bachelor’s degree required
Experience: Minimum of 10 years of relevant experience
Position Summary
We are seeking a Security Engineer to protect enterprise applications, cloud platforms, networks, and supporting infrastructure. This role combines application security testing, threat monitoring, incident response planning, cyber resiliency, and secure cloud operations.
The engineer identifies vulnerabilities, implements monitoring and alerting capabilities, and safeguards critical data and Internet communications. The position also manages communications security resources, supports compliance activities, and collaborates with industry partners to advise government stakeholders on security risks and recommended improvements.
Responsibilities
Secure multiple applications and platforms, identifying critical data, vulnerabilities, and potential exposure points.
Develop and maintain incident response and recovery plans to support cyber resiliency and operational continuity.
Perform web application and platform security testing, document findings, and recommend corrective actions.
Design and implement monitoring and alerting capabilities to detect anomalous activity across applications and infrastructure.
Monitor and correlate security data from multiple systems to support threat detection, investigation, remediation, and continuous improvement.
Coordinate with industry partners to advise government stakeholders on vulnerabilities and security recommendations.
Install, operate, maintain, and upgrade secure cloud computing environments, platforms, software, and core infrastructure.
Build and improve cloud networks and cloud-based systems in accordance with defense-in-depth security policies and governance guidelines.
Manage communications security (COMSEC) resources consistent with CNSSI 4009 terminology, or serve as a key custodian for a cryptographic key management system (CKMS).
Protect organizational websites, Internet transactions, confidential order information, and external business-to-business connections.
Implement and maintain firewall and encryption technologies to protect organizational and customer information.
Administer user accounts and access permissions, including account updates and deletions.
Monitor compliance violations, investigate findings, and follow up on corrective actions.
Develop and maintain security policies, practices, procedures, and guidelines.
Required Qualifications
Must possess an active Top Secret Clearance
- Must be willing and able to obtain a polygraph
Minimum of 10 years of relevant experience in security engineering, cybersecurity, application security, cloud security, or related technical disciplines.
Experience securing multiple applications and identifying critical data and vulnerability points.
Ability to develop incident response and recovery plans.
Knowledge of cyber resiliency, security planning, and web application and platform security testing.
Experience designing security monitoring and alerting capabilities and investigating anomalous activity.
Ability to correlate security data to detect threats, guide remediation, and recommend system improvements.
Experience operating, maintaining, upgrading, and securing cloud infrastructure, platforms, networks, and software.
Understanding of defense-in-depth principles and security governance requirements.
Experience managing COMSEC resources or performing cryptographic key custodial duties.
Knowledge of firewall technologies, encryption, website security, and secure Internet communications.
Experience administering user access, addressing compliance violations, and developing security policies and procedures.
Strong analytical, troubleshooting, and communication skills.
Ability to explain security findings and recommendations to government stakeholders and industry partners.