Elastic Security Engineer

Job Title: Elastic Security Engineer

Location: On-site 4 days/week in Herndon or remote options

Type: Contract

Compensation: Work Model: 1099; 1 year, up to 5 years possible

Hours: 40

Security Clearance: Public Trust Tier 2 / MBI

Monitor systems for abnormal activity. Analyze alerts, distinguish threats from false positives, categorize incidents by risk.

• Lead incident response: containment, eradication, recovery, post-incident analysis, documenting steps.
• Optimize detection capabilities: refine alert thresholds, tune SIEM rules, integrate new data sources, reduce false positives.
• Compile weekly/monthly reports on incident trends, threat activity, and security posture for internal stakeholders.
• Actively participate in team meetings, threat intel reviews, and cross-departmental syncs.

Responsibilities

Monitor systems for abnormal activity and analyze security alerts to identify potential threats. Lead incident response efforts, including containment, eradication, recovery, and post-incident analysis. Optimize detection capabilities by refining alert thresholds, tuning SIEM rules, and integrating new data sources to reduce false positives. Compile and present weekly/monthly reports on incident trends, threat activity, and overall security posture to internal stakeholders. Participate in team meetings, threat intelligence reviews, and cross-departmental synchronization efforts.

Requirements

5+ years of security engineering experience working for a FedRAMP or FISMA Moderate system in an AWS GovCloud environment. Hands-on experience with UiPath architecture: Orchestrator, attended/unattended robots, assets and credential stores, queues, and robot host builds. Design and implementation experience with service account models, credential vaulting, RBAC, separation of duties, and session/audit logging. Knowledge of NIST SP 800-53 Rev 5 Moderate controls applied in build decisions across AC, AU, CM, IA, and SC families. Experience with STIG/CIS hardening, vulnerability scanning, patch management, and configuration management. Understanding of secure SDLC processes and code review skills for automation workflows and scripts. Ability to translate engineering decisions into control language for the A&A team.

OpenKyber, and its subsidiaries including Joul and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. OpenKyber not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. OpenKyber is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

For applications and inquiries, contact:View email address on us.fitly.work