{"id":694476,"url":"https://alion.io/job/twenty-it-security-engineer","title":"IT Security Engineer","company":{"id":685785,"name":"Twenty","domain":"twenty.io","url":"https://alion.io/company/twenty-2","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":94,"open_postings":27,"ghost_share":0,"stale_share":0.037,"repost_share":0,"time_to_fill_p50_days":135,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Arlington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":116000,"max":195000,"currency":"USD","period":"year","gross":null,"usd_annual":195000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CMMC","optional":false},{"name":"DHCP","optional":false},{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PCI DSS","optional":false},{"name":"SIEM","optional":false},{"name":"Snort","optional":false},{"name":"SOC 2","optional":false},{"name":"Splunk","optional":false},{"name":"Suricata","optional":false},{"name":"TCP/IP","optional":false},{"name":"Ansible","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-07-07T20:42:39Z","employer_posted_date":"2026-07-07","last_verified_at":"2026-11-07T20:39:26Z","board_verified":true,"closed_at":null,"days_open":123,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":122},"description":"About the Company\nAmerica is under sustained cyber attack. Our adversaries infiltrate our networks, steal our IP, and degrade the digital infrastructure that modern life runs on. They’ve learned-correctly-that those attacks rarely produce consequences.\nTwenty was founded to change that, by making our adversaries think twice before they attack us. Our vision is American and allied primacy in cyberspace-a future where they cannot contest us, deterrence is assured, and the free world remains secure.\nFounded in 2024, Twenty Technologies (www.twenty.io) industrializes offensive cyber operations for the U.S. and its allies. Headquartered in Arlington, Virginia, Twenty has raised $168M from Khosla Ventures, Accel, Caffeinated Capital, Friends & Family Capital, Point72 Ventures, General Catalyst, and In-Q-Tel.\nMission | On Site | Full Time | U.S. Citizenship Required / No Active Clearance Required\nRole Summary\nWe are seeking IT Security Engineer to join our growing technology engineering team. This is a critical role that will establish and maintain our security infrastructure, protect our digital assets, and ensure compliance with industry standards. You will be responsible for implementing comprehensive security solutions across our network, systems, and applications, while working closely with our development and operations teams to embed security into our organizational culture.\nWhat You'll Do\nDesign, implement, and maintain enterprise network security architecture, including firewalls, intrusion detection systems, VPNs, and DMZs.\n\nDevelop and enforce security policies, standards and procedures across the organization.\n\nConduct security assessments, vulnerability scans and penetration testing to identify and remediate security gaps.\n\nMonitor systems and networks 24/7 using security information and event management (SIEM) tools; investigate and respond to security incidents.\n\nManage access controls, identity and access management (IAM), and multi-factor authentication (MFA) solutions.\n\nEstablish and manage data loss prevention (DLP) and encryption protocols for sensitive data at rest and in transit.\n\nPerform security hardening of servers, workstations, and endpoints; manage patch management and system updates.\n\nProvide security awareness training and education to employees to foster a security-conscious culture.\n\nConduct root cause analysis on security incidents and prepare incident response reports and recommendations.\n\nEnsure compliance with relevant regulations (CMMC, SOC 2, GDPR, PCI-DSS, or industry-specific standards as applicable).\n\nMust Have\nBachelor's degree in Computer Science, Information Security, or related field (or equivalent professional experience).\n\n5+ years of professional IT security experience, with demonstrated expertise in at least two of the following domains: network security, systems security, or cybersecurity.\n\nStrong knowledge of TCP/IP, DNS, DHCP, and network protocols; experience with firewalls, proxies, and network segmentation.\n\nHands-on experience with security tools such as Splunk, ELK Stack, Snort, Suricata, or similar SIEM and IDS/IPS platforms.\n\nProficiency in systems security, including endpoint protection and vulnerability management.\n\nExperience with cloud security (AWS, Azure, or GCP) and containerized environments (Docker, Kubernetes).\n\nUnderstanding of common attack vectors and security frameworks (NIST, CIS Controls, OWASP Top 10).\n\nExcellent problem-solving skills with the ability to work independently and as part of a team.\n\nStrong communication skills to explain complex security concepts to non-technical stakeholders.\n\nNice to Have\nSecurity certifications such as CISSP, CISM, CEH, CCNA Security, Security+, or similar.\n\nExperience with security automation and Infrastructure as Code (Terraform, Ansible).\n\nKnowledge of application security testing (SAST/DAST) and secure development practices.\n\nExperience with incident response and forensics investigations.\n\nFamiliarity with compliance frameworks and audit processes.\n\nBenefits\nWhat's on the table:\nHealth. Medical, dental, and vision plan options. Life / AD&D, disability coverage options.\n\nFamily. Paid parental leave for eligible full-time employees. 12 weeks for birthing parents, 4 for non-birthing parents, 6 weeks for adoptive, foster, or intended parents through surrogacy.\n\nVacation. Paid holidays and flexible PTO. Take what you need.\n\nRetirement. 401(k) with pre-tax and Roth options. HSA/FSA options, dependent care FSA.\n\nBenefits vary by location, role, and eligibility. Full plan details provided during the interview and offer process.\nIf this role sounds like you, apply and share with us your interest\nDue to U.S. government contract and security requirements, this role is limited to U.S. citizens. Some positions may also require eligibility to obtain and maintain a U.S. Government security clearance. Any active clearance requirement will be listed in the role description.\nTwenty is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, veteran status, disability, or any other protected status, consistent with applicable law.\nIf you need a reasonable accommodation during the hiring process, let us know and we will work with you.","description_format":"text","description_chars":5334,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["National Security","Cyber Warfare"],"lifecycle":[{"event":"open","at":"2026-09-11T01:41:42Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 2","filings_12m":2,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":72500,"route":null,"cap_exempt":false,"checked_at":"2026-11-07T07:57:00+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":51,"band":"ok","label":"Likely open","p_open":1,"p_active":0.85,"p_room":0.6,"age_days":122,"expected_fill_days":135,"reasons":["conf:1","velocity","win:late","crowd:"],"computed_at":"2026-11-07T05:47:08Z"},"pay":{"stated_usd_annual":195000,"is_top_pay":true},"html_url":"https://alion.io/job/twenty-it-security-engineer","json_url":"https://alion.io/job/twenty-it-security-engineer.json","meta":{"generated_at":"2026-11-07T22:11:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":36338,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":685785},"rest":"https://alion.io/mcp/rest/get_company?id=685785"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftwenty-it-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftwenty-it-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftwenty-it-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/twenty-it-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftwenty-it-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":694476}},{"tool":"search_jobs","arguments":{"company":"twenty.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":694476},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}