Sr. Security Engineer

Halvik Corp delivers a wide range of services to 13 executive agencies and 15 independent agencies. Halvik is a highly successful WOB business with more than 50 prime contracts and 500 professionals delivering Digital Services Advanced Analytics Artificial Intelligence/Machine Learning Cyber Security and Cutting-Edge Technology across the US Government. Be a part of something special!

Position Overview

Halvik is seeking a candidate to provide technical and operational support for a Federal customers Security Operations Center (SOC). The candidate will support enterprise security monitoring incident response and threat detection across a hybrid IT environment including on-premises infrastructure and cloud services. This role provides advanced security analysis and threat detection and engineering to strengthen organizational cybersecurity operations and continuous monitoring capabilities. The candidate will have hands-on experience with technical troubleshooting remediation validation incident follow-up compliance reviews platform administration and operational security initiatives.

This role is on-site in WashingtonDC.

Core Responsibilities

• Developing enhancing and maintaining Security Operations Center (SOC) standard operating procedures (SOPs) and assessment operations processes.
• Ensuring accountability integrity confidentiality and protection of operational security processes and data.
• Performing vulnerability analysis reviewing program-level documentation (system requirements architectures design documents test plans security plans) and providing technical recommendations.
• Developing and documenting security evaluation plans test procedures and assessment methodologies.
• Conducting hands-on security testing analyzing results identifying risk and recommending countermeasures.
• Assessing and calculating risk based on identified threats vulnerabilities and security control weaknesses.
• Identifying and documenting mitigation strategies for threats vulnerabilities and deficiencies.
• Supporting the design development and implementation of security-related systems tools and assessment capabilities.
• Participating in or leading technical exchange meetings documenting action items and outcomes and briefing leadership on security engineering status and results.
• Supporting SOC alert analysis triage escalation containment actions and continuous improvement of detection and response use cases.
• Leading the engineering and implementation of secure cloud solutions primarily in Microsoft Azure in alignment with the organizations cybersecurity strategy and Federal compliance mandates (e.g. NIST FISMA FedRAMP).
• Integrating Zero Trust security principles across Azure cloud environments including identity hardening micro-segmentation conditional access and continuous monitoring.
• Configuring and operationalizing Azure cloud platform services including:
  • Azure Kubernetes Service (AKS) secure cluster configuration governance and node-pool hardening
  • Azure policy creation and enforcement
  • Secure Landing Zones following Azure enterprise-scale frameworks
  • Role-Based Access Control (RBAC) and least-privilege access models
  • Resource tagging naming standards and governance implementation

Minimum Requirements

• Education: Bachelors degree in Cybersecurity Information Technology Computer Science or related field
• Experience: Minimum of 8 years of cybersecurity experience.
• Technical Proficiency: Demonstrated experience implementing and securing Azure cloud services including AKS Azure Policy Azure AD/Entra Conditional Access RBAC and Zero Trust controls. Ability to evaluate security documentation and develop security test plans evaluation methodologies and technical recommendations. Ability to coordinate across cybersecurity teams and communicate technical information to leadership.
• Compliance: Ensure compliance with Federal cybersecurity regulations including NIST FISMA and associated guidance. Ensure artifacts assessments and system configurations remain aligned with NIST SP 800-53 controls FedRAMP baselines Federal agency policy and directives.
• Certifications:
  • CISSP or equivalent Cybersecurity certification (e.g. Security).
  • Cloud Architecture/Engineer or similar certification (Azure is a plus).
• Active Secret clearance is required.

Preferred Expertise

• Demonstrated success supporting Federal contracts.
• Strong background coordinating with stakeholders (e.g. system owners ISSOs architecture teams and cybersecurity leadership) to validate cybersecurity requirements address information assurance concerns and resolve compliance or security issues.
• Strong analytical written and verbal communication skills with the ability to translate technical risks and content into terms suitable for executive and government stakeholders.
• Ability to work collaboratively with others and contribute to a team environment.