Sr. Security Engineer
Rockville, MD
12+ Months Contract
Interview - Onsite
The primary function of the Security Engineer is responsible for designing, implementing, and maintaining controls that protect enterprise systems and data from unauthorized access, modification, or loss. This role requires expertise in cyber security, email platforms, cloud environments, and data protection operations.
Key Responsibilities
• Operate as a self-motivated security engineer requiring minimal supervision, with strong troubleshooting capabilities across a wide range of information technology systems and security platforms.
• Develop and maintain custom rules within protection and monitoring tools to meet business and regulatory requirements.
• Identify risks and vulnerabilities, and design and implement mitigation strategies.
• Lead and support the design, implementation, and ongoing management of security technologies and services, including acting in project leadership roles when required.
• Administer enterprise email platforms (Google Workspace Gmail, Secure Email Gateway) to protect against phishing, malware, and data exfiltration.
• Manage and optimize cloud security controls within AWS environments, including identity and access management (IAM), logging/monitoring, network security, data protection and configuration security, best practices.
• Support data protection operations, including monitoring, alerting, and incident response.
• Drive data classification and labeling initiatives and integrate with DLP technologies.
• Manage and tune DLP policies across multiple channels and platforms.
• Support compliance initiatives, including audits, assessments, and control documentation.
• Ensure consistent deployment, configuration, and lifecycle management of security tools and platforms.
Qualifications
• 6+ years of experience in information security, with a focus on engineering or cyber operations.
• Bachelor’s degree in Cyber Security, Computer Science, or a equivalent technical experience is preferred.
• Experience implementing enterprise controls across infrastructure, applications, and cloud environments
• Hands-on experience with:
o Email platforms (Google Workspace/Gmail, Secure Email Gateways, SMTP, Microsoft Exchange)
o AWS services (IAM, CloudTrail, GuardDuty, Security Hub, configuration management)
o Data protection technologies (DLP, classification, labeling)
• Experience supporting enterprise data classification and labeling rollouts
• Strong knowledge of:
o Security engineering principles
o Network and system controls
o Identity and access management
o Security protocols and standards
Key Skills
• Email Security Management (Google Workspace)
• Data Protection (DLP, Data Classification)
• Endpoint DLP Management - System troubleshooting (Mac/Windows)
• AWS Data Security controls
