Security Engineer

Security Engineer On-site 4 days/week in Herndon or remote options Contract 1099; 1 year, up to 5 years possible 40 hours Public Trust Tier 2 / MBI Monitor systems for abnormal activity. Analyze alerts, distinguish threats from false positives, categorize incidents by risk. Lead incident response: containment, eradication, recovery, post-incident analysis, documenting steps. Optimize detection capabilities: refine alert thresholds, tune SIEM rules, integrate new data sources, reduce false positives. Compile weekly/monthly reports on incident trends, threat activity, and security posture for internal stakeholders. Actively participate in team meetings, threat intel reviews, and cross-departmental syncs. Responsibilities Monitor systems for abnormal activity and analyze security alerts to identify potential threats. Lead incident response efforts, including containment, eradication, recovery, and post-incident analysis. Optimize detection capabilities by refining alert thresholds, tuning SIEM rules, and integrating new data sources to reduce false positives. Compile and present weekly/monthly reports on incident trends, threat activity, and overall security posture to internal stakeholders. Participate in team meetings, threat intelligence reviews, and cross-departmental synchronization efforts. Requirements 5+ years of security engineering experience working for a FedRAMP or FISMA Moderate system in an AWS GovCloud environment. Hands-on experience with UiPath architecture: Orchestrator, attended/unattended robots, assets and credential stores, queues, and robot host builds. Design and implementation experience with service account models, credential vaulting, RBAC, separation of duties, and session/audit logging. Knowledge of NIST SP 800-53 Rev 5 Moderate controls applied in build decisions across AC, AU, CM, IA, and SC families. Experience with STIG/CIS hardening, vulnerability scanning, patch management, and configuration management. Understanding of secure SDLC processes and code review skills for automation workflows and scripts. Ability to translate engineering decisions into control language for the A&A team. System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan. System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law. #M- #LI- Ref: #856-Baltimore-S1 System One Holdings, LLC