Information Security Engineer
Read straight from Tepa's careers page, verified 15h ago.Seekless can tailor your résumé to it.
Seekless can write your résumé for this posting first.
Before you apply
Salary$110k – $150k
LocationAlexandria, VA
Work modehybrid
Typefull-time
SeniorityMid
Experience5+ yrs
Company size501–1,000 people
PostedOct 21, 2026 · 2w ago
Verified live15h ago
At a glanceSummarised by Seekless from the posting.
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related technical field, or equivalent combination of education, training, and relevant professional experience
5+ years of experience in cybersecurity, information security, systems engineering, infrastructure security, or a related technical role
Hands-on experience investigating and responding to cybersecurity alerts and incidents
Experience administering or supporting enterprise security technologies such as endpoint detection and response (EDR), SIEM, vulnerability management, identity security, firewalls, email security, or cloud security platforms
Experience supporting vulnerability identification, remediation, and security hardening activities
Experience creating and maintaining technical documentation, including procedures, standards, work instructions, diagrams, incident records, and security configuration documentation
Working knowledge of enterprise technologies including endpoints, servers, networking, identity, cloud services, and enterprise applications
Working knowledge of cybersecurity and compliance frameworks such as CMMC, NIST SP 800-171, NIST Cybersecurity Framework, CIS Controls, or similar frameworks
Strong working knowledge of incident response, security monitoring, vulnerability management, endpoint security, identity security, and enterprise security operations
Strong technical troubleshooting and analytical skills with the ability to independently investigate security events and determine appropriate remediation actions
Working knowledge of cloud, endpoint, network, identity, and application security concepts
Ability to implement and maintain security controls based on established architecture, standards, and organizational requirements
Ability to translate technical security requirements into repeatable processes, standards, procedures, and work instructions
Strong documentation skills with attention to accuracy, completeness, and auditability
Ability to balance security requirements with operational and business requirements and appropriately escalate risks or exceptions
Strong written and oral communication skills with the ability to communicate technical security concepts to both technical and non-technical audiences
Strong collaboration skills and the ability to work effectively across Security, Infrastructure, Cloud, End User Services, GRC, and business teams
Ability to prioritize multiple operational, incident response, engineering, and documentation responsibilities
Experience securing Microsoft Azure and Microsoft 365 environments
Experience working within regulated or controlled environments supporting CMMC, NIST SP 800-171, or similar requirements
Experience with Microsoft Government Community Cloud High (GCC High) environments
Experience with Microsoft Defender, Microsoft Sentinel, Entra ID, Intune, CrowdStrike, or comparable security platforms
Experience with security automation, scripting, or workflow improvement using PowerShell, Python, APIs, or similar technologies
Experience performing or supporting incident response exercises, tabletop exercises, security assessments, or audit activities
Experience implementing CIS Benchmarks, DISA STIGs, or similar system-hardening standards
GCIH, Security+, CySA+, CISSP, or similar security certifications
Microsoft security certifications such as Azure Security Engineer Associate or other relevant Microsoft security credentials
Other relevant incident response, cloud security, or cybersecurity engineering certifications
Equal Opportunity Employer/Veterans/Disabled
Skills
Microsoft 365
Azure
Endpoint Detection and Response (EDR)
SIEM
vulnerability management
identity security
firewalls
email security
cloud security
Microsoft Defender
Microsoft Sentinel
Entra ID
Intune
CrowdStrike
PowerShell
Python
CIS Benchmarks
DISA STIGs
Benefits
Medical
Dental
Vision
Paid time off
Holiday pay
401(k)
Life insurance
Flexible spending account
Health savings account
Mental health support
Short term disability
Long term disability
Tuition reimbursement
About the company
ABOUT THE TEPA COMPANIES
Established in 2005 and owned by the Paskenta Band of Nomlaki Indians, The Tepa Companies deliver comprehensive and sustainable solutions to federal, state, local, and private-sector clients throughout the United States. The tribally owned companies work independently and collaboratively to provide wide-ranging construction, engineering, environmental, industrial, staffing, and technology services.
When you join Tepa Companies, you have the opportunity to expand your entrepreneurial skill set while growing professionally alongside the best in the industry. You will have the opportunity to impact your team, the organization as a whole, and subsequently, our Tribe.
We seek out top talent to provide the best services for our clients. We focus on being a responsible company for our employees and their families by creating a culture that reflects our core values and offering competitive pay and benefits package. Our benefits package includes comprehensive medical, dental, vision, generous paid time off and holidays, 401(k) plan with company match, life insurance, flexible spending and health savings account, mental health support and resources, short and long-term disability, and tuition reimbursement.
PAY RANGE: $110,000.00 - $150,000.00
About the role
ABOUT THE JOB
The Tepa Companies are seeking an Information Security Engineer to support the protection of Tepa’s information systems and digital assets through security operations, incident response, vulnerability management, and security engineering activities. This role serves as a technical responder for cybersecurity incidents and performs investigation, containment, remediation, and follow-up activities across Tepa’s Commercial and regulated environments.
Responsibilities
Job Functions:
•
Performs day-to-day security monitoring and incident response activities, including alert triage, investigation, containment, remediation, recovery, and documentation.
•
Investigates security events and incidents using available endpoint, identity, network, cloud, SIEM, and other security telemetry.
•
Coordinates with internal IT teams and third-party security providers during investigation and remediation of cybersecurity incidents.
•
Identifies root causes and contributing factors following security incidents and recommends technical or procedural improvements to reduce recurrence.
•
Implements, configures, administers, and maintains security platforms and controls supporting endpoint, identity, cloud, network, vulnerability management, and security monitoring.
•
Performs vulnerability management activities, including vulnerability review, validation, prioritization, remediation coordination, exception tracking, and verification of completed remediation.
•
Assists with security hardening and configuration management using established security baselines and guidance, including CIS Benchmarks, STIGs, and vendor security recommendations.
•
Supports security engineering initiatives involving Microsoft 365, Azure, endpoint security, identity and access management, network security, and related enterprise technologies.
•
Develops and maintains security processes, standards, procedures, work instructions, diagrams, and other technical documentation.
•
Maintains documentation supporting Tepa’s Commercial environment and CMMC Level 2 enclave, including security controls, operational procedures, incident response activities, and technical standards.
•
Supports implementation and ongoing operation of security requirements associated with CMMC, NIST SP 800-171, and other applicable security and compliance frameworks.
•
Collects and maintains technical evidence supporting security assessments, audits, control validation, and compliance activities.
•
Collaborates with Infrastructure, Cloud, End User Services, GRC, and other business stakeholders to incorporate security requirements into operational processes and technical solutions.
•
Assists with testing and validation of security controls and identifies opportunities to improve security effectiveness, automation, and operational maturity.
•
Participates in incident response exercises, security assessments, and continuous improvement activities.
•
Communicates security findings, risks, remediation requirements, and technical recommendations to both technical and non-technical stakeholders.
•
Available for occasional off-hours work as required to support cybersecurity incidents, maintenance, or other critical security activities.
Requirements
WHAT WE’RE LOOKING FOR
•
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related technical field, or equivalent combination of education, training, and relevant professional experience.
•
5+ years of experience in cybersecurity, information security, systems engineering, infrastructure security, or a related technical role.
•
Hands-on experience investigating and responding to cybersecurity alerts and incidents.
•
Experience administering or supporting enterprise security technologies such as endpoint detection and response (EDR), SIEM, vulnerability management, identity security, firewalls, email security, or cloud security platforms.
•
Experience supporting vulnerability identification, remediation, and security hardening activities.
•
Experience creating and maintaining technical documentation, including procedures, standards, work instructions, diagrams, incident records, and security configuration documentation.
•
Working knowledge of enterprise technologies including endpoints, servers, networking, identity, cloud services, and enterprise applications.
•
Working knowledge of cybersecurity and compliance frameworks such as CMMC, NIST SP 800-171, NIST Cybersecurity Framework, CIS Controls, or similar frameworks.
•
Strong working knowledge of incident response, security monitoring, vulnerability management, endpoint security, identity security, and enterprise security operations.
•
Strong technical troubleshooting and analytical skills with the ability to independently investigate security events and determine appropriate remediation actions.
•
Working knowledge of cloud, endpoint, network, identity, and application security concepts.
•
Ability to implement and maintain security controls based on established architecture, standards, and organizational requirements.
•
Ability to translate technical security requirements into repeatable processes, standards, procedures, and work instructions.
•
Strong documentation skills with attention to accuracy, completeness, and auditability.
•
Ability to balance security requirements with operational and business requirements and appropriately escalate risks or exceptions.
•
Strong written and oral communication skills with the ability to communicate technical security concepts to both technical and non-technical audiences.
•
Strong collaboration skills and the ability to work effectively across Security, Infrastructure, Cloud, End User Services, GRC, and business teams.
•
Ability to prioritize multiple operational, incident response, engineering, and documentation responsibilities.
Nice to have
Preferred Experience (not required)
•
Experience securing Microsoft Azure and Microsoft 365 environments.
•
Experience working within regulated or controlled environments supporting CMMC, NIST SP 800-171, or similar requirements.
•
Experience with Microsoft Government Community Cloud High (GCC High) environments.
•
Experience with Microsoft Defender, Microsoft Sentinel, Entra ID, Intune, CrowdStrike, or comparable security platforms.
•
Experience with security automation, scripting, or workflow improvement using PowerShell, Python, APIs, or similar technologies.
•
Experience performing or supporting incident response exercises, tabletop exercises, security assessments, or audit activities.
•
Experience implementing CIS Benchmarks, DISA STIGs, or similar system-hardening standards.
•
GCIH, Security+, CySA+, CISSP, or similar security certifications.
•
Microsoft security certifications such as Azure Security Engineer Associate or other relevant Microsoft security credentials.
•
Other relevant incident response, cloud security, or cybersecurity engineering certifications.
Legal
Equal Opportunity Employer/Veterans/Disabled