SecOps Engineer - Secret clearance - travel role
PGTEK
·Yesterday
- Salary
- $110k – $145k/yr
- Location
- Oklahoma City, Oklahoma · Ogden, Utah · Montgomery, Alabama · Mechanicsburg, Pennsylvania
- Workplace
- Hybrid
- Type
- Full-time
- Department
- PGTEK
- Clearance
- Required
- Source
- Workable
Description
Security Operations (SecOps) Engineer
Active Secret Clearance Required
Location: Hybrid – Must reside near a primary DISA DHMC site
Possible Locations:
- Oklahoma City, OK
- Montgomery, AL
- Ogden, UT
- Mechanicsburg, PA
Travel: Yes – Weekly travel to DISA locations (you will work out of your local DISA site when not traveling)
Salary Range: $110,000 – $145,000
Position Summary:
We are seeking a Security Operations (SecOps) Engineer to support federal cybersecurity initiatives across enterprise and cloud environments. This role combines hands-on security engineering, operational monitoring, and compliance support to ensure systems remain secure, observable, and audit-ready throughout their lifecycle.
The ideal candidate will have strong experience with Elastic / ELK Stack technologies, security monitoring, and federal compliance frameworks. This role partners closely with DevOps, SRE, and compliance teams to integrate detection, response, and automation into production systems.
Key Responsibilities:
Security Operations & Monitoring
- Monitor, investigate, and respond to security alerts and incidents using Elastic Security (SIEM/XDR)
- Design, deploy, and maintain the Elastic Stack (Elasticsearch, Logstash, Beats, Kibana)
- Develop and tune detection rules, dashboards, and alerting workflows
- Conduct threat hunting and advanced log analysis
Vulnerability & Patch Management
- Perform vulnerability scanning and analysis using tools such as ACAS / Tenable
- Track and remediate vulnerabilities in accordance with federal timelines
- Coordinate patching and mitigation efforts with infrastructure and application teams
Compliance & Continuous Monitoring
- Implement and maintain controls aligned with NIST 800-53, FISMA, and FedRAMP
- Support ATO (Authority to Operate) activities including documentation and evidence collection
- Produce compliance and CDM reporting using Elastic dashboards and data feeds
Secure Engineering & Automation
- Integrate security monitoring and logging into CI/CD pipelines and Infrastructure-as-Code
- Automate ingestion, enrichment, and response workflows using Python, Bash, or PowerShell
- Enforce secure configuration baselines (STIGs, CIS benchmarks)
Collaboration & Risk Management
- Partner with DevOps and SRE teams to embed security observability into system design
- Advise stakeholders on risk posture, detections, and mitigation strategies
- Communicate technical findings to both technical and non-technical audiences