{"schemaVersion":"jobsearcher.job.v1","id":"9052b904ad463ea543e1a22f","url":"https://jobsearcher.com/jobs/9052b904ad463ea543e1a22f","canonicalUrl":"https://jobsearcher.com/jobs/9052b904ad463ea543e1a22f","title":"Security Engineer","description":"Everforth ECS is seeking a Security Engineer to join our team in Portland, OR (Hybrid).\n\nPosition Summary\n\nThe Security Engineer will support development and maturation of an Information Security Continuous Monitoring (ISCM) program for a federal customer. You will interpret complex federal security requirements, translate compliance mandates into practical security control implementations, and drive continuous visibility across enterprise systems.\n\nThis role combines deep expertise in security control frameworks with hands-on technical execution. Key focus areas include SIEM engineering, log pipeline optimization, and developing actionable dashboards and visualizations that communicate risk and operational health to technical teams and leadership. The role will lead risk-based vulnerability management efforts, leverage Cyber Asset Attack Surface Management (CAASM) tooling (specifically Axonius) to eliminate asset visibility blind spots, and build automations to streamline continuous monitoring workflows. Cloud security experience (AWS, Azure, or hybrid environments) is highly desirable as the environment evolves.\n\nThe ideal candidate is collaborative, analytical, and comfortable bridging the gap between high-level security control requirements and hands-on engineering – ensuring practical, measurable security outcomes across complex, distributed federal environments.\n\nThe client this role supports is located in Portland, OR; remote candidates should expect that their work hours will closely align with the client's core hours of 7 a.m. – 3 p.m. PT.\n\nKey Responsibilities\n\nSecurity Engineering\n\nImplement and maintain security controls across network, endpoint, cloud, application, and enterprise infrastructure environments\nEvaluate and recommend security tools, technologies, and configurations\nEmbed security into system lifecycles, engineering workflows, operational processes, and production environments\n\nDetection, Monitoring, and Incident Response\n\nDesign, tune, and validate detection logic, alerts, monitoring rules, and analytics for threats and anomalous activity\nAssist and support incident response activities, including triage, investigation, containment, remediation, and recovery coordination\nPerform root cause analysis and drive long-term corrective actions after security incidents or control failures\nSupport threat hunting, proactive risk identification, and security assessment activities\n\nVulnerability and Risk Management\n\nOversee vulnerability management activities, including prioritization, remediation guidance, exception review, and risk-based reporting\nConduct security assessments, configuration reviews, hardening activities, and technical control validation\nSupport compliance, audit, and risk management initiatives by providing technical evidence, analysis, and remediation plans\nTranslate technical findings into practical risk and mitigation recommendations for technical and leadership audiences\n\nAutomation and Engineering Excellence\n\nDevelop scripts, tooling, automation, and repeatable workflows to improve security operations, monitoring, and response efficiency\nPartner with DevOps, SRE, infrastructure, and engineering teams to integrate security tooling into CI/CD pipelines and operational workflows\nImprove reliability, scalability, performance, and maintainability of security platforms and integrations\nDocument engineering standards, runbooks, design decisions, and operational procedures\n\nTechnical Collaboration\n\nServe as an escalation point and for complex security engineering issues\nWork with operational team to document processes and requirements\nCollaborate cross-functionally with IT, DevOps, product, application, cloud, compliance, and SOC teams\n\nGeneral Description of Benefits\n\nRequirements:\n\nRequired Qualifications\n\nA minimum of five years of experience in security engineering or closely related technical security roles\nStrong expertise with Linux and Windows operating systems, networking concepts and protocols, and common enterprise system architectures\nStrong understanding of common attack techniques, defensive controls, detection approaches, and secure configuration practices\nHands-on experience with enterprise security tools such as SIEM, EDR/XDR, IDS/IPS, vulnerability scanners, and firewalls\nExperience contributing to incident response efforts, root cause analysis, and remediation planning\nStrong scripting or automation skills using Python, Bash, PowerShell, or similar languages\nAbility to operate independently, prioritize competing technical issues, and make sound decisions under pressure\nStrong written and verbal communication skills, including the ability to document and effectively communicate risks, findings, tradeoffs, and recommendations to technical teams and leadership\n\nTools and Technologies\n\nSIEM platforms\nEDR/XDR platforms\nIDS/IPS technologies\nVulnerability scanners\nFirewalls and network security platforms\nLinux and Windows systems\nPython, Bash, PowerShell, or similar scripting languages\nCloud security tooling\nInfrastructure as code and CI/CD tooling\n\nKey Competencies\n\nAdvanced security engineering\nSecure architecture and control design\nIncident response\n\nReq Benefits:\nBenefits - Everforth ECS","company":"Everforth Ecs","rawCompany":"everforth ecs","city":"Gladstone","state":"OR","isRemote":false,"isActive":false,"createdAt":"2026-10-30T09:50:51.586Z","occupations":[{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"541519","title":"Other Computer Related Services","slug":"other-computer-related-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Security Engineer","description":"Everforth ECS is seeking a Security Engineer to join our team in Portland, OR (Hybrid).\n\nPosition Summary\n\nThe Security Engineer will support development and maturation of an Information Security Continuous Monitoring (ISCM) program for a federal customer. You will interpret complex federal security requirements, translate compliance mandates into practical security control implementations, and drive continuous visibility across enterprise systems.\n\nThis role combines deep expertise in security control frameworks with hands-on technical execution. Key focus areas include SIEM engineering, log pipeline optimization, and developing actionable dashboards and visualizations that communicate risk and operational health to technical teams and leadership. The role will lead risk-based vulnerability management efforts, leverage Cyber Asset Attack Surface Management (CAASM) tooling (specifically Axonius) to eliminate asset visibility blind spots, and build automations to streamline continuous monitoring workflows. Cloud security experience (AWS, Azure, or hybrid environments) is highly desirable as the environment evolves.\n\nThe ideal candidate is collaborative, analytical, and comfortable bridging the gap between high-level security control requirements and hands-on engineering – ensuring practical, measurable security outcomes across complex, distributed federal environments.\n\nThe client this role supports is located in Portland, OR; remote candidates should expect that their work hours will closely align with the client's core hours of 7 a.m. – 3 p.m. PT.\n\nKey Responsibilities\n\nSecurity Engineering\n\nImplement and maintain security controls across network, endpoint, cloud, application, and enterprise infrastructure environments\nEvaluate and recommend security tools, technologies, and configurations\nEmbed security into system lifecycles, engineering workflows, operational processes, and production environments\n\nDetection, Monitoring, and Incident Response\n\nDesign, tune, and validate detection logic, alerts, monitoring rules, and analytics for threats and anomalous activity\nAssist and support incident response activities, including triage, investigation, containment, remediation, and recovery coordination\nPerform root cause analysis and drive long-term corrective actions after security incidents or control failures\nSupport threat hunting, proactive risk identification, and security assessment activities\n\nVulnerability and Risk Management\n\nOversee vulnerability management activities, including prioritization, remediation guidance, exception review, and risk-based reporting\nConduct security assessments, configuration reviews, hardening activities, and technical control validation\nSupport compliance, audit, and risk management initiatives by providing technical evidence, analysis, and remediation plans\nTranslate technical findings into practical risk and mitigation recommendations for technical and leadership audiences\n\nAutomation and Engineering Excellence\n\nDevelop scripts, tooling, automation, and repeatable workflows to improve security operations, monitoring, and response efficiency\nPartner with DevOps, SRE, infrastructure, and engineering teams to integrate security tooling into CI/CD pipelines and operational workflows\nImprove reliability, scalability, performance, and maintainability of security platforms and integrations\nDocument engineering standards, runbooks, design decisions, and operational procedures\n\nTechnical Collaboration\n\nServe as an escalation point and for complex security engineering issues\nWork with operational team to document processes and requirements\nCollaborate cross-functionally with IT, DevOps, product, application, cloud, compliance, and SOC teams\n\nGeneral Description of Benefits\n\nRequirements:\n\nRequired Qualifications\n\nA minimum of five years of experience in security engineering or closely related technical security roles\nStrong expertise with Linux and Windows operating systems, networking concepts and protocols, and common enterprise system architectures\nStrong understanding of common attack techniques, defensive controls, detection approaches, and secure configuration practices\nHands-on experience with enterprise security tools such as SIEM, EDR/XDR, IDS/IPS, vulnerability scanners, and firewalls\nExperience contributing to incident response efforts, root cause analysis, and remediation planning\nStrong scripting or automation skills using Python, Bash, PowerShell, or similar languages\nAbility to operate independently, prioritize competing technical issues, and make sound decisions under pressure\nStrong written and verbal communication skills, including the ability to document and effectively communicate risks, findings, tradeoffs, and recommendations to technical teams and leadership\n\nTools and Technologies\n\nSIEM platforms\nEDR/XDR platforms\nIDS/IPS technologies\nVulnerability scanners\nFirewalls and network security platforms\nLinux and Windows systems\nPython, Bash, PowerShell, or similar scripting languages\nCloud security tooling\nInfrastructure as code and CI/CD tooling\n\nKey Competencies\n\nAdvanced security engineering\nSecure architecture and control design\nIncident response\n\nReq Benefits:\nBenefits - Everforth ECS","datePosted":"2026-10-30T09:50:51.586Z","dateModified":"2026-10-30T09:50:51.586Z","hiringOrganization":{"@type":"Organization","name":"Everforth Ecs","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Gladstone","addressRegion":"OR","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"9052b904ad463ea543e1a22f"},"url":"https://jobsearcher.com/jobs/9052b904ad463ea543e1a22f"}}