Linux Security Engineer

About the role

As a Linux Security Engineer in Infrastructure Security, you will help maintain and improve the security posture for a progressive Federal agency. You’ll collaborate with teams to harden Linux environments, audit configurations, and deliver consulting services that strengthen security posture and manage incidents.

Responsibilities

• Perform security hardening and rule creation for Linux environments, including reviewing and re-evaluating configuration settings and rules to verify security posture and reduce risk.
• Identify potential security vulnerabilities in existing configuration settings and propose remediation through settings or architectural changes.
• Audit firmware versions and configuration settings for all Linux endpoints to eliminate vulnerabilities and ensure compliance with vendor recommendations, industry best practices, DoD Security Technical Implementation Guides (STIG), and DHS configuration guidance.
• Analyze security incidents and provide recommendations for improvement.
• Deliver consulting services to help clients achieve a superior security posture and effectively manage security incidents.
• Create remediation recommendations and roadmaps to address identified security vulnerabilities and incidents.

Technical and Professional Expertise

• Expertise in installing, configuring, operating, and patching Linux servers and managing Linux-based applications.
• Advanced knowledge of configuration management tools (e.g., Ansible, Chef, Puppet, SaltStack) and Linux/Windows administration in medium-large enterprises.
• Strong shell scripting experience (ssh, scp, rsync, sudo) with hands-on work in containerization and orchestration tools (Docker, Podman, Kubernetes, ECS/EKS, Fargate, Singularity).
• Advanced understanding of clustering, load balancing, replication services, and automation using Python with frameworks such as Flask, Django, or FastAPI.
• Familiarity with container security tools (Twistlock, Falco, Clair) and possession of an active RHCE or equivalent certification/experience.
• Ability to obtain and maintain Public Trust clearance.

Preferred Technical and Professional Experience

• Experience performing security hardening, reviewing and re-evaluating configuration settings and rules to verify and improve security posture across environments.
• Experience supporting federal agencies.
• Ability to demonstrate and explain technical concepts to both technical and non-technical audiences.
• Strong communication skills with customers and teammates to provide recommendations for improvements to existing software applications.
• Understanding of New Relic, Nagios or similar monitoring tools.