Security Engineering Lead

About the role

Agile Defense is seeking an experienced Security Engineering Lead to support an enterprise cybersecurity program delivering 24/7 Cybersecurity Operations Center (CSOC) services. This role serves as the technical lead for SOC security engineering and modernization efforts, including the integration and sustainment of SIEM, SOAR, EDR, and IDS/IPS platforms. Responsibilities include ensuring compliance with established standards, optimizing system performance, and driving continuous improvement across the enterprise security architecture.

Responsibilities

• Engineer, integrate, and maintain CSOC capabilities and platforms, ensuring effective configuration management and performance optimization.
• Advance Zero Trust principles, automation, and telemetry coverage across both cloud and on-premises environments.
• Assess and test emerging technologies; develop comprehensive technical reports and implementation plans to support modernization initiatives.
• Supervise changes in software, hardware, facilities, telecommunications, and user needs.
• Test security solutions using industry standard analysis criteria; deliver technical reports and formal papers on test findings.
• Respond to information security issues during each stage of a project’s lifecycle.
• Produce technical documentation, including architecture diagrams and detailed root cause analysis reports.

Requirements

• Minimum required certifications: A+, Security+, or Network+; CISSP certification.
• Bachelor’s degree.
• A minimum of 3 years’ experience in security administration systems and support.
• Strong working knowledge of Security Services, Networking, Security Policy, and Consulting.
• Proven experience in installing, configuring, monitoring, and troubleshooting network security solutions and related monitoring tools, including Layer 2 / Layer 3 network devices, Network Admission Control (NAC), 802.1x, Firewalls, IDS / IPS, VPN Solutions, Web Application Firewalls, Content Filtering, and fault analysis.
• Advanced working knowledge of encryption algorithms, Operating Systems (Linux, Windows), secure communications, SIEM technologies, and embedded systems security.
• Advanced working knowledge of network and data communication protocols.
• Familiarity with NIST, FISMA, and Common Criteria regulations and standards.
• Experience with Network-based IDS / IPS technologies and affiliated modes of operation; experienced in evaluating new technologies and processes that enhance security capabilities.
• Strong scripting skills (Bash, PowerShell) and ability to use automation tools such as Ansible or Puppet.

Preferred Qualifications

• CISSP certification.
• Experience with supporting Zero Trust Network and Operating Certifications (Cisco, Redhat, Microsoft).
• Cloud provider certifications (AWS Certified Solutions Architect, Azure Solutions Architect Expert, etc.).
• Excellent written and oral communication skills.

Location & Clearance

Hybrid role based in Reston, VA. Requires Secret clearance level.

Our Core Values

At Agile Defense, our culture is defined by the 6Hs—values that guide everything we do:

• Happy - Be Infectious: Happiness multiplies and creates a positive, connected environment where motivation and satisfaction drive success.
• Helpful - Be Supportive: Teamwork thrives in a supportive atmosphere where collaboration and collective success are celebrated.
• Honest - Be Trustworthy: Honesty ensures transparent communication and ethical conduct, essential to our mission.
• Humble - Be Grounded: Humility fosters mutual respect, open communication, and a willingness to learn from one another.
• Hungry - Be Eager: Our drive for excellence fuels innovation and continuous improvement in the face of challenges.
• Hustle - Be Driven: A relentless work ethic ensures we go above and beyond to advance the mission.