Security Engineer

OverviewLooking to make a difference, to help keep people safe, or even to save lives through your work with technology? Join Acuity’s team of experts to have an impact on our government’s critical missions. Acuity, Inc. is a consulting firm that supports federal agencies in the areas of IT Modernization, Data Enablement, and Hyperautomation. We are currently hiring for a Security Engineer.Looking to make a difference, to help keep people safe, or even to save lives through your work with technology? Join Acuity’s team of experts to have an impact on our government’s critical missions. Acuity, Inc. is a consulting firm that supports federal agencies in the areas of IT Modernization, Data Enablement, and Hyperautomation.ResponsibilitiesProvide hands-on technical subject matter expertise with respect to setting up and administering Fortify SSC, Fortify Security Assistant IDE Plugin, OWASP ZAP, and Audit Workbench. Anticipate expanding to SonaType. Administer applications and users.Field troubleshooting questions for developers (i.e., connections to pipelines)Field troubleshooting questions for front-end users (testers, security analysts -- "is this a false positive?", etc)Work with Project teams to review vulnerabilities. Familiar with Windows ServerWork autonomously in an area of specialization to analyze internal security and provide relevant information to internal and external customers, suppliers, and partners.Have skill sets to perform computer incident response and remediation practices as outlined in NIST 800-61 (Computer Security Incident Handling Guide) and DHS 4300A Sensitive Systems Policy Handbook, Attachment F Incident Response. The staff will assist the Security Operation Center (SOC) on incident response actions for security incidents affecting the Cloud environment.Assist with the implementation of monitoring capabilities for various audiences – developers, business owners, security, and infrastructure; analyze all platform level, network changes and monitor impact and provide appropriate technical solutions to resolve issues efficiently; evaluate and document operating baseline according to required standards.Perform other duties as assigned by the Government.QualificationsMust have hands-on expertise with respect to setting up and administering Fortify SSC, Fortify Security Assistant IDE Plugin, OWASP ZAP, and Audit WorkbenchHave and maintain at least one active certification such as CISSP, CCISSP, CEH, CISM, CISA, Cloud+, CCSP, or other comparable certification which must be approved in advance by the Government PM (on a case-by-case basis)Minimum of five (5) years of experience in security engineering or security operationsExperience in security process mapping, security process analysis, security process improvement concepts, models, and best practicesExperience with cloud Platform as a Service (PaaS), Software as a Service (SaaS) and other cloud servicesExperience with Continuous Integration (CI)/Continuous Delivery (CD) - Deployment pipeline experience (Jenkins, Ansible, Terraform)Experience or a strong knowledge of Data at Rest Application Programing Interface (API) designExperience or a strong knowledge of programming languages (Python, Java etc.)Experience or a strong knowledge of container/orchestration tools (Kubernetes, Docker, Puppet, etc)Have a deep understanding of API Security, Container Security, Cloud SecurityAdvanced Microsoft Excel and Access skills to perform extensive data mining, correlation, and reportingContractor shall be staffed in the Washington, DC metropolitan area, unless explicitly approved by the Government PMExperience working with NIST SP 800-53, RMF, FISMA, DHS and DoD policiesSome other tools besides Fortify that if they appear on the candidate’s experience could be reasonable substitutes:CASTCode CompareCodeScene Behavioral Code AnalysisCodeSonarCoverityEmbold Fortify Static Code Analyzer ParasoftPVS-StudioRaxisreshiftRIPS TechnologiesSmartBear CollaboratorUnderstandVisual ExpertVeracodeExcellent customer service, analytical, problem solving, team-building, and interpersonal skillsAbility to work independently and function as an integral part of the teamExcellent oral and written communication skills; technical and business focused, with the ability to document and describe security process information collectedListening skills, the ability to detect explicit and implicit needs and wantsDemonstrated ability to exercise good judgment, prioritize multiple tasks, and problem solve under pressure of deadlines and resource constraintsProven experience in building consensus and managing cross-functional teams Clearance RequirementsMust have an Active Secret clearance or higher, verifiable in JPASAbout AcuityAt Acuity, your work matters—and so does your experience. We’re a management and technology consulting firm supporting critical federal missions, where you’ll have the opportunity to solve meaningful challenges, work alongside high-performing teams, and make a real impact from day one.Why You’ll Love Working HereGrow Your Career, Your WayWe invest in you with personalized development plans, mentorship, and up to $3,000 annually for training and certifications and up to $3,000 for degree seeking programs—so you can keep building the career you want.Be Part of Something InnovativeYou’ll work on cutting-edge solutions that support important government missions, in an environment that encourages new ideas and continuous improvement.Thrive in a People-First CultureCollaboration, respect, and support aren’t just values—they’re how we operate. Your voice is heard, your contributions are recognized, and your success is shared.Feel Valued and RewardedWe offer competitive compensation, comprehensive benefits, and a strong focus on work-life balance so you can perform at your best—at work and at home.Join an Award-Winning TeamOur employees consistently rank us among the best—earning honors like Best Places to Work (Washington Business Journal, 9+ years) and Top Workplaces (The Washington Post, 2022–2025).Bring Your Whole Self To WorkWe’re committed to building a diverse, inclusive environment where everyone feels respected, supported, and empowered to succeed.Make Your ImpactJoin Acuity and be part of a team where your ideas are valued, your growth is supported, and your work drives meaningful outcomes.Learn more: www.myacuity.comAcuity is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.Recruiting Scams and FraudAcuity Inc. has been made aware of fraudulent job postings and individuals impersonating company recruiters. These scams may include fake job offers, requests for sensitive personal information, or demands for payment.Please Note Acuity never asks candidates to pay for job applications, equipment, or training. All official communications will come from an @myacuity.com email address. If you are unsure about a job posting or recruiter, please verify the opportunity on our Careers page. If you believe you have been targeted by a scam or have concerns about the authenticity of a job listing claiming to represent Acuity Inc., please contact us at careers@myacuity.com. Protecting your security and trust is important to us.