Senior Security Engineer

ECS is seeking a Senior Security Engineer to work in our Arlington, VA (hybrid) office.

We are looking for a talented Senior Security Engineer who is passionate about building, securing, and improving modern technology environments. Strong candidates will have deep hands-on experience across security engineering, cloud, Linux, networking, automation, and application security, with a desire to learn and work with emerging technologies.

This is a hands-on engineering role , not a compliance-focused ISSO position. The ideal candidate will be comfortable designing and implementing security controls, writing automation and tooling, troubleshooting complex technical issues, and partnering directly with engineering teams to build secure and resilient systems.

Responsibilities

• Design, build, implement, and maintain security solutions across cloud, application, infrastructure, and containerized environments.
• Identify vulnerabilities, attack paths, configuration weaknesses, and security gaps, and develop practical engineering solutions to remediate them.
• Build and maintain security automation, tooling, scripts, and integrations using languages such as Python, Go, PowerShell, or Bash.
• Engineer security controls for Linux systems, networks, cloud platforms, containers, Kubernetes, applications, and supporting infrastructure.
• Develop and improve security monitoring, logging, detection, and response capabilities using system, application, network, and cloud telemetry.
• Implement security into CI/CD pipelines, infrastructure-as-code workflows, and software development processes.
• Partner with developers, DevOps engineers, cloud engineers, and system administrators to design solutions that are secure, scalable, maintainable, and operationally effective.
• Perform hands-on security testing, technical assessments, configuration reviews, and troubleshooting of complex systems and applications.
• Develop security tooling and integrations using APIs, automation frameworks, and native cloud services.
• Secure microservices, APIs, containers, and distributed application architectures.
• Harden operating systems, network services, cloud resources, and application platforms using security engineering best practices.
• Analyze security data and metrics to identify trends, prioritize risk, and drive improvements to the security posture of the environment.
• Research emerging threats, vulnerabilities, attack techniques, and security technologies and determine how they apply to the environment.
• Provide technical leadership and mentorship while remaining actively involved in engineering and implementation work.

Salary Range: $140,000-$180,000 General Description of Benefit Required Skills

• Bachelor’s degree in engineering, computer science, cybersecurity, or another technical discipline, or an associate degree with equivalent years of relevant technical experience.

• At least 8 years of overall technical experience, including significant hands-on experience in several of the following areas:

• Security Engineering

• Unix/Linux Administration and Security

• Network and Infrastructure Security

• Cloud Engineering and Cloud Security

• Application or Software Development

• Security Automation and Scripting

• Vulnerability Management and System Hardening

• Container and Kubernetes Security

• Security Monitoring, Detection, and Incident Response

• Strong scripting or development experience in at least one language such as Python, Go, PowerShell, Bash, Perl, or similar.

• Demonstrated ability to independently troubleshoot complex technical and security problems and implement solutions.

• Ability to work directly with engineering teams and translate security requirements into practical technical controls.

Must successfully complete a stringent Background Investigation and obtain the required Government Security Clearance. Desired Skills

• Strong understanding of Git and modern software development workflows.
• Experience developing security tooling or automation using Python, Golang, C#, Java, C++, or similar programming languages.
• Strong experience with Bash and/or PowerShell.
• Deep knowledge of Linux security, operating system internals, and core system services, including DNS, SMTP, Syslog, SSH, firewalls, authentication, and system logging.
• Strong understanding of TCP/IP networking, firewalls, network segmentation, proxies, load balancers, VPNs, and network security controls.
• Hands-on experience with AWS, Azure, and/or Google Cloud Platform security.
• Experience securing containers, Kubernetes, Docker, and microservice architectures.
• Experience implementing security controls within CI/CD pipelines and DevSecOps environments.
• Experience with infrastructure-as-code technologies such as Terraform, CloudFormation, or equivalent tools.
• Experience with vulnerability management, system hardening, security testing, and remediation.
• Experience with security monitoring and detection technologies such as SIEM, EDR, IDS/IPS, cloud-native security tooling, and centralized logging platforms.
• Familiarity with identity and access management, secrets management, certificates/PKI, encryption, and key management.
• Understanding of common application and API vulnerabilities and secure development practices.
• Experience evaluating and responding to security findings using hands-on technical analysis rather than solely relying on compliance documentation.

#EverforthECS1

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law. Everforth ECS is the federal segment of Everforth , a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We Value

• Attracting and developing top talent and high-performing teams
• Fostering a culture that is engaging, accountable, and mission-driven

Meet the challenge. Make a difference with Everforth ECS!