Security Tool Engineer - Cybersecurity Professional

Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, digital engineering and transformation, and enterprise AI and intelligent automation. We always seek to delight our customers, so we retain highly qualified employees and offer them meaningful work, growth opportunities, and work-life balance. What sets us apart from all other contractors is the sense of teamwork our employees feel – and the knowledge that outstanding effort is recognized and rewarded.  The camaraderie we share emanates from Lunch & Learn sessions where we explore new ideas together, fun group activities ranging from escape rooms to miniature golf, and much, much more. If we’ve described you and your dream workplace, please apply and share in the many benefits and opportunities we offer.

Security Tool Engineer - Cybersecurity Professional

Position Overview
We are seeking an experienced Cybersecurity Professional – Security Tools & Analytics to administer, engineer, integrate, automate, and support enterprise cybersecurity tools and infrastructure platforms. The ideal candidate will have strong hands-on experience with endpoint security, asset intelligence/CAASM, SIEM, scripting and automation, API integrations, infrastructure troubleshooting, and security compliance.

Responsibilities

• Administer, engineer, maintain, and troubleshoot enterprise security tools and infrastructure platforms, including CrowdStrike, Armis, Axonius, and Elastic Stack/Elastic SIEM.
• Support endpoint security, asset discovery and CAASM, security analytics, dashboards, monitoring, reporting, policies, integrations, and platform health.
• Develop and maintain integrations using REST APIs, Python, BASH/Shell, Perl, JavaScript, and related technologies.
• Automate security and infrastructure administration, monitoring, reporting, and operational processes.
• Perform command-line administration, configuration, O&M, and troubleshooting of security infrastructure, servers, applications, APIs, and network connectivity.
• Collaborate with Security, Infrastructure, Network, Server, and Operations teams to resolve technical issues and improve platform performance.
• Lead or support security tool implementations, upgrades, migrations, integrations, and enhancement initiatives.
• Gather technical and business requirements and develop technical specifications, workflows, implementation plans, and solutions.
• Track project requirements, dependencies, risks, issues, schedules, and action items.
• Evaluate existing processes and systems and identify opportunities for automation, optimization, and integration.
• Maintain technical documentation, system designs, configurations, procedures, runbooks, and service records.
• Apply security hardening and compliance standards, including CIS Controls, NIST SP 800-53 Rev. 5, and DISA STIGs.
• Provide technical leadership and mentoring to junior team members.

Qualifications

• Bachelor's degree or higher in Computer Science, Information Systems, Cybersecurity, Information Security, Information Technology, Engineering, or a related field, or equivalent combination of education and experience.
• Approximately 8+ years of experience in cybersecurity, information security, security engineering, infrastructure engineering, or related IT disciplines.
• Current professional security certification such as CISSP, CISM, ISSEP, or equivalent/higher-level certification.
• Hands-on experience with enterprise security technologies, including CrowdStrike and preferably Armis and/or Axonius.
• Experience with Elastic Stack/Elastic SIEM or comparable SIEM/security analytics platforms.
• Strong scripting and automation skills using Python, BASH/Shell, Perl, JavaScript, or similar languages.
• Experience with REST APIs, system integrations, and security automation.
• Strong command-line administration and troubleshooting skills, with knowledge of network fundamentals and LAN/WAN troubleshooting.
• Strong analytical, problem-solving, communication, documentation, and collaboration skills.
• Ability to work independently, support cross-functional teams, and participate in a 24/7/365 on-call rotation.

Electrosoft is an Equal Opportunity Employer/Veterans/Disabled