{"id":3691771,"url":"https://alion.io/job/scientific-research-corporation-security-engineer","title":"Security Engineer","company":{"id":1944347,"name":"Scientific Research Corporation","domain":"scires.com","url":"https://alion.io/company/scires","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Orlando, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Bash","optional":false},{"name":"Chef","optional":false},{"name":"CI/CD","optional":false},{"name":"Configuration Management","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Linux","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Splunk","optional":false},{"name":"VMWare","optional":false},{"name":"Wazuh","optional":false},{"name":"Windows","optional":false},{"name":"Docker","optional":true},{"name":"Kubernetes","optional":true},{"name":"Threat Modeling","optional":true}],"status":"live","first_seen_at":"2026-11-03T16:49:31Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-05T14:07:08Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Description\nSRC is hiring a hands-on, Agile-embedded Security Engineer responsible for securing virtualized Modeling & Simulation (M&S) environments, automating compliance-as-code across a diverse infrastructure, and developing custom security tools and telemetry dashboards. This role bridges the gap between technical execution and security governance by advising security leadership, managing vulnerabilities, and ensuring continuous compliance with DoD directives.\nVulnerability & Patch Management\nImplementing, coordinating, and maintaining patching procedures across diverse environments, including Linux, Windows, VMware virtual layers, and Cisco network systems\nDesigning and deploying automated patching processes for Windows and Linux workloads to minimize manual intervention and reduce the overall attack surface\nExecuting and reviewing regular vulnerability scans and DISA STIG compliance audits to assess system risk\nAnalyzing vulnerability data to prioritize and execute remediation efforts across endpoints, networks, and software applications\nBeing responsible for securing and hardening physical and virtual hardware, operating systems, and software configurations\nGovernance, Risk & Compliance (GRC)\nSupporting the tracking, resolution, and milestone completion for the program’s Plan of Action and Milestones (POA&M) items\nAuthoring, updating, and maintaining comprehensive program security policies, operational procedures, and technical security standards\nEnsuring all engineering and operational activities comply with relevant DoD standards, directives, regulations, and NIST frameworks\nConducting structured risk assessments and providing direct technical support for program audit activities\nServing as a key technical advisor to the ISSO (Information System Security Officer) and ISSM (Information System Security Manager) on the security, engineering, and monitoring of classified DoD networks\nCreating, updating, and maintaining detailed data flow and system boundary diagrams to support authorization packages\nRemaining continuously abreast of emerging technologies, cyber threats, vulnerabilities, and modern security tools\nSecurity Architecture & Engineering\nDesigning, implementing, configuring, and managing comprehensive security solutions, including SIEM (Splunk), EDR (Trellix), Host/Network IDS/IPS (Wazuh), firewalls, Identity & Access Management (IAM), and VPNs\nEvaluating, testing, and integrating new security technologies, tools, and SaaS/on-prem solutions into the existing environment\nEmbedding directly within Agile software development squads, collaborating during sprint planning, story estimation, and retrospectives to ensure security engineering tasks keep pace with release cadence\n#LI-DH1\nRequirements\nActive DoD 8570/8140 IAT Level II baseline credential (such as CompTIA Security+ CE, CySA+, or equivalent) required on day one\nActive DoD Secret clearance with verified TS/SCI Eligibility (ability to pass a Single Scope Background Investigation)\nBachelor’s (BS) degree in Cybersecurity, Computer Science, Information Technology, or a related technical field (equivalent professional experience will be considered)\nStrong understanding of network protocols, security architecture patterns, and hands-on experience securing both Linux-based and Windows-based systems\nHighly proficient in scripting and programming languages (e.g., Python, PowerShell, Bash) to build custom automated tools and utilities\nHands-on experience with modern automation and configuration management tools (such as Ansible, Terraform, Puppet, or Chef)\nPractical understanding of CI/CD concepts, including how to embed security controls, automated testing, and compliance-as-code into deployment pipelines\nIn-depth knowledge of modern threat landscapes, software vulnerabilities, threat mitigation techniques, and standard security processes\nStrong familiarity with cybersecurity frameworks and control sets, specifically NIST SP 800-53, NIST SP 800-171, SOC 2, and/or ISO 27001\nProven ability to author clear, concise, and accurate cybersecurity guidance, standard operating procedures (SOPs), and program documentation\nDesired Skills\nPrior experience supporting cybersecurity operations for high-fidelity DoD modeling, simulation, and synthetic training networks\nExperience conducting threat modeling, static code analysis (SAST), or dynamic code analysis (DAST) within software development lifecycles\nFamiliarity with securing containerized environments (Docker) and container orchestration platforms (Kubernetes)\nClearance Information\nSRC IS A CONTRACTOR FOR THE U.S. GOVERNMENT, THIS POSITION WILL REQUIRE U.S. CITIZENSHIP AS WELL AS, A U.S. GOVERNMENT SECURITY CLEARANCE AT THE SECRET LEVEL WITH TOP SECRET / SCI ELGILIBILTY\nTravel Requirements\nMinimal (About Us\nScientific Research Corporation is an advanced information technology and engineering company that provides innovative products and services to government and private industry, as well as independent institutions. At the core of our capabilities is a seasoned team of highly skilled engineers and scientists with multidisciplinary backgrounds. This team is challenged daily to provide cutting edge technology solutions to our clients.\nSRC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with a company match, life insurance, vacation and sick paid time off accruals with amounts increasing based on role and years of service, 11 paid holidays, tuition reimbursement, and a work environment that encourages excellence and more. For positions requiring a security clearance, selected applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information.\nEEO\nScientific Research Corporation is an equal opportunity employer that does not discriminate in employment. All qualified applicants will receive consideration for employment without regard to their race, color, religion, sex, age, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other protected characteristic under federal, state or local law.\nScientific Research Corporation endeavors to make www.scires.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact  for assistance. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.","description_format":"text","description_chars":6558,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Science & Engineering","National Security","Information Security","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-11-03T16:49:31Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":14,"reasons":["conf:2","velocity","win:early","comp:brand"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/scientific-research-corporation-security-engineer","json_url":"https://alion.io/job/scientific-research-corporation-security-engineer.json","meta":{"generated_at":"2026-11-05T15:43:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20569,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1944347},"rest":"https://alion.io/mcp/rest/get_company?id=1944347"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fscientific-research-corporation-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fscientific-research-corporation-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fscientific-research-corporation-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/scientific-research-corporation-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fscientific-research-corporation-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3691771}},{"tool":"search_jobs","arguments":{"company":"scires.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3691771},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}