Security Engineer – Lead (R-00161)

Job description

True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the **Best Places to Work** in 2023 in two categories (“Prosperous and Thriving” ($5MM–$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a **Best Places to Work** honoree. In addition, True Zero earned coveted spots on the **Inc. 5000** list of fastest-growing companies in America in **2022, 2023, and 2025**, a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence. ### Job Responsibilities This role will design, implement, and strengthen technical security capabilities that support RMF execution, FISMA requirements, and secure enterprise operations. This position calls for a senior engineer who can translate federal security requirements into operational controls, support engineering improvements across enterprise systems, and provide hands-on leadership in both enterprise and classified environments. **Job Duties** - - Lead cybersecurity engineering activities supporting enterprise systems and security capabilities - Design, implement, and improve technical security controls and engineering practices - Support implementation and optimization of security engineering practices aligned to RMF and FISMA requirements - Assist with development and maintenance of secure configurations, engineering standards, and technical documentation - Support technical implementation of continuous monitoring and automation capabilities - Support engineering efforts tied to operational security tooling and platform effectiveness - Provide engineering guidance for security monitoring, infrastructure protection, systems hardening, and secure integration - Use MITRE ATT&CK to help identify control gaps, express defensive coverage limitations, and recommend technical remediation priorities - Support implementation, administration, and engineering activities related to Splunk Enterprise Security - Coordinate with operational, engineering, and government stakeholders on technical implementation priorities - Support assessments, engineering reviews, and security improvements across systems and environments - Ensure engineering deliverables are accurate, complete, and aligned with mission needs ### Job Qualifications - Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related technical field; or equivalent experience - Strong experience in cybersecurity engineering, systems security, and enterprise technical implementation - Experience translating security requirements into technical designs and operational controls - Experience supporting secure enterprise environments, including complex and high-visibility federal systems - Familiarity with RMF-driven control implementation, secure system integration, engineering governance, and continuous monitoring support - Experience using MITRE ATT&CK to assess defensive coverage, identify security engineering gaps, and support remediation planning - Experience with Splunk Enterprise Security administration and security engineering support - Ability to work effectively in classified environments within government controlled secure facilities - Strong technical writing, engineering documentation, and stakeholder communication skills **Required Certifications** - CISSP - ISSEP - Splunk Certified Enterprise Security Admin - **Clearance Required** Top Secret/SCI Clearance (Final)