Associate Security Engineer Jobs in Washington (NOW HIRING)

Job Summary:
ActioNet, Inc. is a woman-owned IT Solutions Provider with over 25 years of experience in Agile Software Engineering, Cloud Solutions, Cyber Security, and IT Managed Services. The Security Engineering Lead is responsible for engineering, implementing, and maintaining cybersecurity controls across enterprise infrastructure, ensuring protection of systems and compliance with applicable cybersecurity program requirements.
Responsibilities:
• Establish, govern, and direct implementation of enterprise cybersecurity control frameworks across server infrastructure, Microsoft 365 services, network environments, cloud platforms, and endpoint systems, ensuring alignment with federal cybersecurity standards, NIST security frameworks, and Zero Trust architecture principles.
• Govern the enterprise vulnerability management program, establishing risk-based prioritization strategies, remediation timelines, and executive reporting mechanisms to reduce exposure and ensure continuous compliance across enterprise IT environments.
• Define and enforce enterprise security configuration standards including endpoint protection baselines, Microsoft Defender security services, firewall policy governance, encryption controls, and access enforcement mechanisms to maintain confidentiality, integrity, and availability of enterprise systems.
• Direct integration and optimization of security telemetry across enterprise SIEM platforms, ensuring comprehensive log ingestion, effective correlation rule development, alert tuning, and alignment with incident detection and response objectives.
• Lead enterprise security control assessments, audit readiness activities, and compliance reporting, providing executive-level briefings on risk posture, remediation progress, emerging threat trends, and control effectiveness to senior cybersecurity and IT leadership.
• Serve as the enterprise technical authority during cybersecurity incident response activities, directing root cause analysis, validating containment and eradication strategies, and recommending long-term control improvements to prevent recurrence.
• Provide cybersecurity risk oversight during Change Advisory Board (CAB) reviews, evaluating infrastructure and application modifications for security impact and approving implementation based on enterprise risk assessment and mitigation adequacy.
• Maintain enterprise security architecture documentation, control implementation evidence, risk registers, and remediation tracking artifacts, ensuring audit readiness and demonstrable compliance.
Qualifications:
Required:
• Bachelor’s Degree with 12+ years of progressive cybersecurity experience, including demonstrated authority establishing, governing, and directing enterprise security engineering programs within complex IT environments OR Master’s Degree with 10+ years or Associate’s Degree with 15+ years of relevant experience may be substituted.
• Demonstrated experience establishing and governing enterprise cybersecurity control frameworks across server, network, M365, cloud, and endpoint environments.
• Proven ability to direct enterprise vulnerability management strategy, including risk-based prioritization, remediation governance, and executive-level reporting of security posture.
• Advanced knowledge of federal cybersecurity mandates and NIST-based frameworks.
• Experience leading enterprise security assessments, control validation reviews, and audit readiness initiatives.
• Demonstrated authority integrating and optimizing security telemetry within enterprise SIEM platforms to enhance detection, response, and threat visibility.
• Experience directing incident response activities, providing executive briefings, and recommending long-term control improvements to reduce organizational risk.
• Ability to establish security performance metrics and drive continuous improvement across multiple infrastructure domains.
Preferred:
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Cloud Security Professional (CCSP)
Company:
ActioNet, Inc., headquartered in Vienna, Virginia, is a CMMI®-DEV Level 4, CMMI®-SVC Level 4, ISO 20000, ISO 27001, ISO 9001, HDI-certified, woman-owned IT Solutions Provider with strong qualifications and expertise in Cloud-based Solutions, Cyber Security and Agile Software Engineering. Founded in 1998, the company is headquartered in Vienna, USA, with a team of 1001-5000 employees. The company is currently Late Stage.