Senior Incident Response Consultant, Rapid Response
Sophos
Location: Remote
Required Clearance: Public Trust
Required Education: Bachelors
Required Experience: 8 years
The Security Engineer (SIEM / EL3 Logging) is responsible for designing, implementing, and maintaining robust security monitoring, logging, and incident response capabilities for the FSA IAM systems. This role ensures advanced event logging (EL3), Security Event and Incident Management (SIEM), and overall security compliance to protect sensitive identity data and support rapid threat detection.
The Security Engineer ensures the IAM solution meets Event Log Management and Advanced Logging (EL3) requirements, proper encryption standards for data at rest (AES-256 with SHA-256) and data in transit (latest TLS protocols), and FISMA compliance. They lead Security Incident Management, manage remediation efforts for security findings, support Ongoing Security Assessments (OSA), and maintain Plan of Action and Milestones (POA&M) in CSAM. Key responsibilities include implementing and enhancing SIEM processes to detect and respond to threats in real time, managing security controls and inheritance statements, addressing Continuous Diagnostics and Monitoring (CDM) results, handling Common Vulnerabilities and Exposures (CVE) findings, tracking remediation efforts, and ensuring the Cybersecurity Framework (CSF) scorecard meets or exceeds required ratings. The role also supports broader compliance activities, including supply chain risk management, data planning, federal records and CUI handling, IT accessibility (Section 508), technology business management reporting, and project, risk, and schedule documentation needed to sustain the Authority to Operate (ATO). They provide security expertise for identity verification, account recovery processes, and overall environment protection.
About PingWind
PingWind is focused on delivering outstanding services to the federal government. We have extensive experience in the fields of cybersecurity, development, IT infrastructure, supply chain management and other professional services such as system design and continuous improvement. PingWind is an SBA certified Service-Disabled Veteran-Owned Small Business (SDVOSB) with offices in Northern Virginia and Huntsville AL.
www.PingWind.com
The pay range for this job is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) job responsibilities, education, certifications, experience, as well as internal equity mapping and alignment with market data, or other applicable laws.
Veterans are encouraged to apply
PingWind, Inc. does not discriminate in employment opportunities, terms, and conditions of employment, or practices on the basis of race, age, gender, religious or political beliefs, national origin or heritage, disability, sexual orientation, or any characteristic protected by law.
Originally posted on Himalayas
Sophos
GitLab
mercor
ESO
BlackCloak
Akamai Technologies
Elastic
Doordash
IANS
Zeta Global
Upwind Security
Huntress
mercor
Akamai Technologies
DeepHealth
PingWind
Commercial Bank of California
Myriad360
StartSteps Digital Education GmbH
Akamai Technologies
Akamai Technologies
mercor
Alteryx
Akamai Technologies
Resilinc
mercor
GitLab
Elastic
CompassMSP
YipitData
Location: Remote
Required Clearance: Public Trust
Required Education: Bachelors
Required Experience: 8 years
The Security Engineer (SIEM / EL3 Logging) is responsible for designing, implementing, and maintaining robust security monitoring, logging, and incident response capabilities for the FSA IAM systems. This role ensures advanced event logging (EL3), Security Event and Incident Management (SIEM), and overall security compliance to protect sensitive identity data and support rapid threat detection.
The Security Engineer ensures the IAM solution meets Event Log Management and Advanced Logging (EL3) requirements, proper encryption standards for data at rest (AES-256 with SHA-256) and data in transit (latest TLS protocols), and FISMA compliance. They lead Security Incident Management, manage remediation efforts for security findings, support Ongoing Security Assessments (OSA), and maintain Plan of Action and Milestones (POA&M) in CSAM. Key responsibilities include implementing and enhancing SIEM processes to detect and respond to threats in real time, managing security controls and inheritance statements, addressing Continuous Diagnostics and Monitoring (CDM) results, handling Common Vulnerabilities and Exposures (CVE) findings, tracking remediation efforts, and ensuring the Cybersecurity Framework (CSF) scorecard meets or exceeds required ratings. The role also supports broader compliance activities, including supply chain risk management, data planning, federal records and CUI handling, IT accessibility (Section 508), technology business management reporting, and project, risk, and schedule documentation needed to sustain the Authority to Operate (ATO). They provide security expertise for identity verification, account recovery processes, and overall environment protection.
About PingWind
PingWind is focused on delivering outstanding services to the federal government. We have extensive experience in the fields of cybersecurity, development, IT infrastructure, supply chain management and other professional services such as system design and continuous improvement. PingWind is an SBA certified Service-Disabled Veteran-Owned Small Business (SDVOSB) with offices in Northern Virginia and Huntsville AL.
www.PingWind.com
The pay range for this job is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) job responsibilities, education, certifications, experience, as well as internal equity mapping and alignment with market data, or other applicable laws.
Veterans are encouraged to apply
PingWind, Inc. does not discriminate in employment opportunities, terms, and conditions of employment, or practices on the basis of race, age, gender, religious or political beliefs, national origin or heritage, disability, sexual orientation, or any characteristic protected by law.
Originally posted on Himalayas