Security Engineer - Mid Level

Security Engineer (Mid-level)

Softrams, a Tria Federal company, prides itself in leading the charge for innovation and transformation in the federal government space. We offer technological implementations and build customer-centric services that are simple, intuitive, and usable across multiple industries. By partnering with federal agencies, our specialized digital services are reimagining and reshaping the digital landscape to bring positive change for millions of Americans.

Softrams, acquired in November 2024, forms the core of Tria Federal’s new Public Health business unit. Tria Federal (Tria) delivers mission-critical technical expertise and digital services informed by deep customer expertise to Health and Public Safety agencies across the federal sector.

At Tria, we are a dynamic professional community driven by a mission rooted in service to colleagues, customers, and the community. Tria invests in its employees with a top-tier benefits package to support their physical, mental, and financial well-being.

Job Description:

Tria Federal is seeking a Mid-level Security Engineer to support our application modernization and transition efforts, as well as the development and maintenance of required federal program security documentation and processes.

In this role, you will be responsible for developing and maintaining security operations, monitoring and management standard operating procedures (SOPs); monitoring and reporting vulnerabilities; and tracking, assessing, and reporting security risks. The successful candidate must have experience supporting Federal Risk and Authorization Management Program (FedRAMP) applications or systems and Authorization to Operate (ATO) processes.

Advanced technology or cybersecurity certifications such as the CISSP or relevant AWS certifications in solutions architecture, DevOps, or Security are highly preferred. Knowledge of and experience with Salesforce are also highly preferred.

As a Security Engineer, you will be working on multiple projects facilitating security operations including Web Applications, Infrastructure Scanning / Auditing, Log Monitoring, and CDN Activity. Tria Federal utilizes industry standard tools and follows an Agile framework.

Requirements:

• Ability to obtain a U.S. Federal Position of Trust clearance designation.

• Must reside in and be able to perform work in the United States.

• Must have lived in the United States for 3 of the last 5 years.

• Must have at least 3 years of experience in cybersecurity supporting a U.S. federal customer

• Bachelor’s degree in cybersecurity, computer science, engineering, technology, data science, statistics, analytics, or related quantitative and software development field.

• Candidate in the DMV area will be required to travel to our Baltimore office (Woodlawn MD) once a week (Tuesday).

• Proven work experience as a system security engineer or information security engineer.

• Thorough knowledge of NIST 800-53 controls, ATO processes, and FedRAMP systems.

• Required to maintain ATO for systems and perform during annual Adaptive Capabilities Testing (ACT).

• Thorough understanding of the latest security principles, techniques, and protocols.

• Experience with Kali, Linux, and Windows Operating Systems.

• Knowledge of static and dynamic code testing.

• Experience in building and maintaining security systems.

• Detailed technical knowledge of database and operating system security.

• Hands on experience in security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc.

• Experience with network security and networking technologies and with system, security, and network monitoring tools.

• Familiarity with web related technologies (Web applications, Web Services, Service Oriented Architectures) and of network/web related protocols.

• Problem solving skills and ability to work under pressure in a fast-paced environment.

• Familiarity with Cloud Computing Platforms (AWS, Azure, Google).

• Proficiency with Nessus, Burp Suite, ZAP, and OWASP.

• Writing scripts with Python, Bash, and PowerShell.

• Experience with Splunk, AppOmni, and AWS

• Strong analytical, troubleshooting, and problem-solving skills.

• Excellent written and verbal communication skills.

• Must have demonstrated ability and desire for active learning, embracing change and mentoring others in the organization.

Responsibilities:

• Working under general direction, you will engineer, implement, and monitor security measures for the protection of computer systems, networks, and information.

• Identify and define system security requirements.

• Design computer security architecture and develop detailed cyber security designs.

• Prepare and document standard operating procedures and protocols.

• Configure and troubleshoot security infrastructure devices.

• Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.

• Ensure that the company knows as much as possible, as quickly as possible about security incidents.

• Write comprehensive reports including assessment-based findings, outcomes, and propositions for further system security enhancement.

• Produce client-facing documentation of Proof of Concept or Vulnerability Exploitation.

• Maintain ATOs and all security documentation, including, but not limited to: SSP, CP, ISRA, TableTop Exercises, and PIA

• Manage Splunk, AppOmni, and AWS integrations to completion

Preferred Certifications:

• AWS Security Certification

• Certified Authorization Professional (CAP)

• Certified Ethical Hacker (CEH)

• Certified Network Defense Architect (CNDA)

• Certified information Systems Security Professional (CISSP)

Public Trust Clearance:

Many of our roles require the hired candidate to go through public trust clearance. A minimum of 3 years of stay in the U.S. within the last 5 years is required to be eligible to qualify for public trust clearance sponsorship.

Work Location:

Headquartered in Arlington, VA, we also have a primary office in Baltimore, MD for those who prefer to work on-site. However, with employees spread across 40+ states, we have many remote roles.

EEO Statement:

Softrams, a Tria Federal Company, is an affirmative action and equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. Softrams is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation, or to participate in the job application or interview process, contact the Talent Acquisition Team at [email protected]

Know your rights poster: