SENIOR CYBERSECURITY ENGINEER @ ALPHOSOFT
We are seeking a Senior Cybersecurity Engineer to join our security operations team in Chantilly, VA. This critical role requires at least 8 years of experience in information security, with a heavy focus on Application Security (AppSec) and cloud defense. You will be responsible for identifying vulnerabilities, implementing security controls, and ensuring that our applications and infrastructure are protected against evolving cyber threats.
The candidate will lead SAST and DAST scanning efforts and manage security across AWS, Azure, and GCP environments. Proficiency with security tools such as CrowdStrike, CyberArk, and Splunk is required for incident detection and management. You will also oversee Identity and Access Management (IAM) and ensure strict adherence to NIST and PCI-DSS compliance standards. This position is located in Chantilly, VA, and we are open to relocation for the right professional.
The candidate will lead SAST and DAST scanning efforts and manage security across AWS, Azure, and GCP environments. Proficiency with security tools such as CrowdStrike, CyberArk, and Splunk is required for incident detection and management. You will also oversee Identity and Access Management (IAM) and ensure strict adherence to NIST and PCI-DSS compliance standards. This position is located in Chantilly, VA, and we are open to relocation for the right professional.
Key Requirements
8+ years of professional experience in cybersecurity engineering.
Expertise in Application Security including SAST and DAST methodologies.
Proven experience securing multi-cloud environments (AWS, Azure, GCP).
Hands-on experience with CrowdStrike and CyberArk for endpoint security.
Proficiency in using Splunk for security information and event management (SIEM).
Experience with security scanning tools like Fortify and Checkmarx.
Strong knowledge of Identity and Access Management (IAM) protocols.
Deep understanding of NIST, PCI-DSS, and other compliance frameworks.
Experience in vulnerability management and incident response procedures.
Ability to perform complex security audits and risk assessments.