Security Engineer IV – Security Tools and Analytics
Job Overview
cFocus Software is seeking a highly skilled Security Engineer IV (Security Tools and Analytics) to support the Security Tools and Infrastructure Modernization (STIM) contract with the U.S. Department of Health and Human Services (HHS).The Security Engineer IV will provide enterprise-level expertise in deploying, managing, and optimizing security tools and analytics platforms to strengthen cybersecurity operations, monitoring, and compliance.
Responsibilities
- Deploy, configure, and maintain enterprise security tools such as SIEM, vulnerability management, and IDS/IPS platforms.
- Perform advanced security analytics and monitoring for threat detection, correlation, and incident response.
- Integrate security tools into SOC workflows and federal reporting requirements.
- Support vulnerability scanning, remediation planning, and compliance dashboards.
- Develop and manage automation/orchestration workflows across security platforms.
- Provide guidance and mentorship to junior security engineers and analysts.
- Collaborate with stakeholders to design and implement enterprise security solutions.
- Ensure compliance with NIST SP 800-53 Rev. 5, CIS Controls, FISMA, and FedRAMP standards.
- Document technical specifications, SOPs, and security engineering processes.
- Participate in 24/7/365 operations and on-call rotations as required.
Required Experience
- 10+ years of cybersecurity engineering and operations experience.
- Extensive expertise with enterprise security tools including SIEM, endpoint protection, and vulnerability management platforms.
- Proven ability to support incident response and forensic investigations using security analytics.
- Experience leading enterprise security engineering initiatives in federal environments.
- Strong communication and documentation skills for reporting and compliance activities.
Education & Certifications
- Bachelor’s degree in Information Security, Computer Science, or related field (Master’s preferred).
- CISSP (Certified Information Systems Security Professional) certification required.
- GIAC certifications (GCIA, GCIH, GMON, or GCFA) preferred.
- Additional certifications such as CompTIA CASP+, CySA+, or vendor-specific (Splunk, QRadar, Elastic) are highly desirable.
Clearance Requirement
- Must be eligible to obtain and maintain a Public Trust (High-Risk, Level 5) clearance.
