ERT, Inc.
Position Summary
ERT is seeking a Security Engineer to work directly with Agile development and operations teams supporting the modernization of AWIPS (Advanced Weather Interactive Processing System) into a cloud-native, microservices-based enterprise platform.
The Security Engineer will be embedded within one or more Agile teams to implement, test, and automate security controls, ensuring compliance and mission security requirements are met. This role provides the hands‑on expertise needed to bring the Security Architect's strategy and design into day‑to‑day execution, making security a seamless part of the Agile delivery process.
Agile Team Integration
Participate in Agile ceremonies (refinement, planning, reviews) to identify and address security requirements early.
Translate security policies and architecture guidance into actionable user stories and backlog items.
Work with Product Owners to include security in acceptance criteria.
Implementation & Automation
Configure and maintain cloud‑native security services (IAM, key management, encryption, security groups, policies).
Implement automated security scanning in CI/CD pipelines (SAST, DAST, container scanning, IaC validation).
Support secure configuration of microservices, containers, and APIs.
Monitoring & Response
Deploy and tune logging, monitoring, and alerting solutions to detect anomalous or malicious activity.
Assist in vulnerability management, incident response, and remediation.
Partner with Site Reliability Engineers (SREs) to ensure resilience and fault tolerance.
Collaboration & Support
Work closely with Cloud Engineers, Developers, and Network Engineers to enforce zero‑trust principles.
Provide technical expertise to resolve security issues during development and deployment.
Escalate risks and gaps to the Security Architect for resolution and program‑wide action.
Required Skills
3+ years of experience in IT security or cloud security engineering.
Familiarity with cloud service provider security tools (AWS, Azure, GCP).
Hands‑on experience with CI/CD pipeline security (e.g., GitLab CI, Jenkins, SonarQube, Aqua, Snyk).
Strong understanding of IAM, encryption, container security, and API security.
Ability to troubleshoot and secure distributed, data‑intensive systems.
Good communication skills for collaborating with Agile teams.
Must be a US Citizen or Permanent Resident and be able to pass a background investigation to obtain a security badge to enter the applicable government facility.
Desired
Security certifications: CompTIA Security+, AWS Security Specialty, Azure Security Engineer Associate, or equivalent.
Experience supporting federal mission systems (NOAA, NWS, DoD, DHS).
Background in large‑scale cloud migrations or data‑intensive platforms.
Familiarity with SAFe or other scaled Agile frameworks.
Education Bachelor's degree in Cybersecurity, Computer Science, or related field (or equivalent experience).
Location This position supports work at NOAA's Silver Spring and College Park, MD facilities.
Compensation The salary range for this role is $66,000 - 242,000/year. This range is a good faith estimate based on similar roles across the organization. ERT uses several factors when extending an offer, including but not limited to, the position's scope and expected duties, a candidate's work experience, education/training, and key skills.
Benefits
Medical, Rx, Dental, and Vision Insurance
401(k) retirement plan with company‑matching
11 Paid Federal Government Holidays
Paid Time Off (PTO)
Basic Life & Supplemental Life
Health Savings Account, Flexible Spending and Dependent Care Flexible Spending Accounts
Short‑Term & Long‑Term Disability
Employee assistance program (EAP)
Tuition Reimbursement, Personal Development & Learning Opportunities
Skills Development & Certifications
Professional Membership Reimbursement
Employee Referral Program
Competitive compensation plan
Discretionary variable incentive bonuses based on factors such as individual performance, business unit performance, and/or the company's performance
Publication and Conference Presentation Awards with bonuses
ERT is a VEVRAA Federal Contractor and Equal Opportunity employer – All qualified applicants will be considered for employment without regard to race, color, religion, sex, national origin, disability, or protected Veteran status.
#J-18808-Ljbffr
The Security Engineer will be embedded within one or more Agile teams to implement, test, and automate security controls, ensuring compliance and mission security requirements are met. This role provides the hands‑on expertise needed to bring the Security Architect's strategy and design into day‑to‑day execution, making security a seamless part of the Agile delivery process.
Agile Team Integration
Participate in Agile ceremonies (refinement, planning, reviews) to identify and address security requirements early.
Translate security policies and architecture guidance into actionable user stories and backlog items.
Work with Product Owners to include security in acceptance criteria.
Implementation & Automation
Configure and maintain cloud‑native security services (IAM, key management, encryption, security groups, policies).
Implement automated security scanning in CI/CD pipelines (SAST, DAST, container scanning, IaC validation).
Support secure configuration of microservices, containers, and APIs.
Monitoring & Response
Deploy and tune logging, monitoring, and alerting solutions to detect anomalous or malicious activity.
Assist in vulnerability management, incident response, and remediation.
Partner with Site Reliability Engineers (SREs) to ensure resilience and fault tolerance.
Collaboration & Support
Work closely with Cloud Engineers, Developers, and Network Engineers to enforce zero‑trust principles.
Provide technical expertise to resolve security issues during development and deployment.
Escalate risks and gaps to the Security Architect for resolution and program‑wide action.
Required Skills
3+ years of experience in IT security or cloud security engineering.
Familiarity with cloud service provider security tools (AWS, Azure, GCP).
Hands‑on experience with CI/CD pipeline security (e.g., GitLab CI, Jenkins, SonarQube, Aqua, Snyk).
Strong understanding of IAM, encryption, container security, and API security.
Ability to troubleshoot and secure distributed, data‑intensive systems.
Good communication skills for collaborating with Agile teams.
Must be a US Citizen or Permanent Resident and be able to pass a background investigation to obtain a security badge to enter the applicable government facility.
Desired
Security certifications: CompTIA Security+, AWS Security Specialty, Azure Security Engineer Associate, or equivalent.
Experience supporting federal mission systems (NOAA, NWS, DoD, DHS).
Background in large‑scale cloud migrations or data‑intensive platforms.
Familiarity with SAFe or other scaled Agile frameworks.
Education Bachelor's degree in Cybersecurity, Computer Science, or related field (or equivalent experience).
Location This position supports work at NOAA's Silver Spring and College Park, MD facilities.
Compensation The salary range for this role is $66,000 - 242,000/year. This range is a good faith estimate based on similar roles across the organization. ERT uses several factors when extending an offer, including but not limited to, the position's scope and expected duties, a candidate's work experience, education/training, and key skills.
Benefits
Medical, Rx, Dental, and Vision Insurance
401(k) retirement plan with company‑matching
11 Paid Federal Government Holidays
Paid Time Off (PTO)
Basic Life & Supplemental Life
Health Savings Account, Flexible Spending and Dependent Care Flexible Spending Accounts
Short‑Term & Long‑Term Disability
Employee assistance program (EAP)
Tuition Reimbursement, Personal Development & Learning Opportunities
Skills Development & Certifications
Professional Membership Reimbursement
Employee Referral Program
Competitive compensation plan
Discretionary variable incentive bonuses based on factors such as individual performance, business unit performance, and/or the company's performance
Publication and Conference Presentation Awards with bonuses
ERT is a VEVRAA Federal Contractor and Equal Opportunity employer – All qualified applicants will be considered for employment without regard to race, color, religion, sex, national origin, disability, or protected Veteran status.
#J-18808-Ljbffr