Security & Safety|Security,Security & Safety,Engineering|Engineering Operations Manager,Engineering Jobs

Job Description

Auberge Collection is seeking a Security Operations Engineer to operate and improve security tools and response practices across Home Office, cloud and hotel environments. The role leads technical incident response, advances vulnerability remediation, oversees managed security provider performance, and supports security controls and audit readiness.

Based in Bethesda, this role partners with Technology, Regional IT, property teams and external providers. The MSSP provides contracted monitoring and coverage; this role owns Auberge’s internal technical escalation and response. It does not require solo, continuous 24×7 monitoring.

Key responsibilities

Security platforms and operations

• Responsible for the effectiveness and lifecycle of Auberge’s security tools—including SIEM, EDR, vulnerability management, identity, email, DLP and cloud security—directly or in partnership with third-party providers.

• Strengthen security monitoring across Home Office and hotel environments by improving data visibility, alert accuracy, system integrations, response playbooks and control coverage.

• Partner with platform owners to maintain secure configurations and current access controls, oversee privileged account management, and keep architecture and integration documentation accurate and up to date.

• Identify capability gaps and recommend practical improvements to the Director of Cybersecurity.

Incident response and vulnerabilities

• Investigate and lead technical response to phishing, malware, account compromise, unauthorized access, data exposure and other incidents.

• Coordinate containment, recovery, evidence, communications and post-incident reviews with the Director, MSSP, Regional IT, property leaders and affected teams.

• Escalate high-severity incidents promptly and support the designated incident leader.

• Prioritize vulnerabilities by risk, assign remediation, manage exceptions, validate fixes and report progress.

• Identify recurring incidents and control weaknesses, and drive corrective actions with accountable owners.

Provider oversight and hotel security

• Coordinate MSSP delivery, including alert quality, escalation paths, playbooks, service levels and improvement plans; raise coverage gaps and unresolved risks.

• Provide an escalation path for Regional IT and properties, coordinating response through established operating structures.

• Maintain practical hotel security scorecards and review material risks and corrective actions with Technology and property leaders.

• Support PCI and privacy assessments with technical evidence, control testing and remediation of assigned findings.

• Review security needs for cloud, applications, integrations, major changes and property openings; maintain procedures and technical documentation.

Automation and AI-enabled workflows

• Build security-focused scripts, integrations and workflows for alert enrichment, investigation, phishing analysis, vulnerability prioritization, case documentation and reporting.

• Apply least privilege, secure credential handling, data minimization, audit logging and human review; test accuracy, reliability and operational value.

• Keep consequential actions, including containment, access changes and external communications, within approved authorization and escalation controls.

• Partner with Enterprise Data & AI and AI Engineering when workflows require shared AI services, governed data access or production applications.

Umbra is an American space technology company delivering advanced systems, from sensors to spacecraft, that empower customers worldwide with unmatched access to critical information from space. Our mission is simple and ambitious: redefine space—for people, systems, and missions in every domain. Umbra’s ecosystem operates through three business units: Remote Sensing (the data), Space Systems (the components), and Mission Solutions (the platforms). Together, our teams develop capabilities that deliver persistent access, resilient performance, and mission-ready solutions, advancing U.S. space leadership while keeping the world safe and informed.  

About the Team

Umbra’s Information Technology organization operates as a shared service and strategic capability, embedding security, automation, and operational rigor directly into the platforms the business depends on. Security is not an overlay, it is designed, implemented, and evidenced through IT platforms.

About the Role

The Security Operations Engineer is a hands-on technical role responsible for designing, implementing, operating, and continuously improving security controls across Umbra’s corporate technology platforms. This position serves as the primary conduit between Information Security (InfoSec) and IT execution, ensuring security policy is translated into durable, auditable technical controls.

Sitting within Core Infrastructure, this role owns the security configuration control plane for corporate IT: identity, access, email security, data protection, network security, endpoint posture, vulnerability management, logging, and detection. The role partners closely with InfoSec on risk management, program deployment, POA&M execution, and audit readiness.

This is an engineering-first role focused on building and integrating secure-by-default platforms, not a SOC-only or alert-triage position.

This position is based on-site in either our Arlington, VA office or Reston, VA office.

Key Responsibilities

• Security Engineering: Design, implement, and operate technical security controls across identity, endpoint, network, cloud, email, and SaaS environments, translating InfoSec policies and standards into enforceable configurations and platform guardrails.
• Vulnerability Management: Own the technical vulnerability management lifecycle across corporate IT platforms, including scanning and coverage, risk-based prioritization, remediation coordination, validation, exception tracking, and reporting.
• Administer vulnerability scanning tools and partner with infrastructure and application owners to drive remediation of vulnerabilities, configuration issues, and critical or actively exploited exposures.
• Email Security: Design and maintain email security controls, including SPF, DKIM, DMARC, secure mail routing, monitoring, and protection against phishing, spoofing, and domain abuse.
• Data Loss Prevention: Design, implement, and tune DLP controls across email, endpoints, cloud storage, messaging, and SaaS platforms, including controls supporting CUI and other regulated data.
• Identity & Access: Secure and operate IAM capabilities including SSO, MFA, SCIM/JIT, PAM, least-privilege access, and access-review remediation.
• Endpoint Security: Partner with IT teams to implement and maintain security baselines across Windows and macOS environments, including encryption, patching, device trust, and endpoint security tooling.
• Network & Cloud Security: Implement and maintain security controls across network and cloud environments, including segmentation, firewalls, ZTNA/VPN, logging, and cloud security guardrails.
• Detection & Incident Response: Operate and tune security monitoring and detection capabilities, integrating signals across identity, endpoint, email, and DLP platforms and supporting investigation and remediation of security incidents.
• Compliance & Audit Readiness: Maintain technical documentation, configuration artifacts, and evidence supporting NIST, CMMC, FedRAMP, and other applicable security and compliance requirements.
• Automation & Continuous Improvement: Automate security controls, vulnerability management, evidence collection, and compliance workflows to improve reliability and reduce manual effort.
• Cross-Functional Collaboration: Partner closely with InfoSec, Core Infrastructure, Digital Workplace, Enterprise Applications, Legal, and other stakeholders to implement security requirements and remediate technical risks.
• Participate in security-related change reviews, CABs, and other governance forums as needed.
• Perform other duties as assigned.

Requirements

Required Qualifications

• 5+ years of experience in security engineering, security operations, or infrastructure security roles.
• Hands-on experience managing the vulnerability lifecycle, including authenticated scanning, finding validation, risk-based prioritization, remediation coordination, and verification of closure.
• Strong hands-on experience designing and deploying:
• Email authentication: SPF, DKIM, and DMARC
• Enterprise DLP controls
• Strong hands-on experience implementing security controls across:
• Identity & Access Management
• Endpoint management (Windows/macOS)
• Network and cloud platforms
• Demonstrated ability to translate security policy into enforceable technical implementation.
• Experience coordinating patches, upgrades, and configuration changes across technical teams while balancing security risk, operational availability, and change-management requirements.
• Experience supporting & automating audit and compliance evidence collection.
• Strong troubleshooting and incident response skills.

Desired Qualifications

• 10+ years of experience in security engineering, security operations, or infrastructure security roles.
• Experience with vulnerability assessment platforms, such as Tenable/Nessus, and patch management tooling, such as BigFix.
• Experience with Okta: IdP, SSO, MFA, SCIM, and workflows.
• Strong hands on experience designing and deploying eDiscovery and retention workflows.
• Experience with FortiGate & Cisco network technologies.
• Strong understanding of TCP/IP, DNS, HTTP/S, VPNs, SD-WAN, and routing/switching.
• Experience deploying DLP in regulated environments.
• Familiarity with NIST, CMMC, and FedRAMP.
• Experience automating security controls, vulnerability remediation workflows, or evidence collection.
• Exposure to cloud security tooling and observability platforms.
• Proficiency in Python, Bash, or PowerShell.

Benefits

• Flexible Time Off, Sick, Family & Medical Leave
• Medical, Dental, Vision, Life, LTD, STD (employer funded)
• Vol Life, Critical Illness, Accidental, Hospital Indemnity, Pet Insurance (employee funded)
• 401k with 3% non-elective company contribution
• Stock Options
• Free Parking
• Free lunch daily in office

Umbra is an Equal Opportunity Employer. We do not discriminate in hiring on the basis of sex, gender identity, sexual orientation, race, color, religious creed, national origin, physical or mental disability, protected veteran status, or any other characteristic protected by federal, state, or local law.

Employment Eligibility Verification

In compliance with federal laws, all hired persons will be required to verify their identity and eligibility to work in the United States by completing the required Employment Eligibility Verification Form (I-9 Form) upon hire.

ITAR/EAR Requirements

This position may include access to technology and/or data that is subject to U.S. export controls pursuant to ITAR and EAR. To comply with federal export controls, all persons hired must be a U.S. citizen, U.S. national, U.S. lawful permanent resident, refugee or asylee as defined by 8 U.S.C. § 1324b(a)(3), or must otherwise be eligible to obtain the required authorizations from the U.S. Department of State and/or U.S. Department of Commerce as applicable.

Pay Transparency

This job posting may cover multiple career levels. To ensure greater transparency, we provide base salary ranges for all roles, regardless of location. Our standard pay ranges are based on the role’s function and level, benchmarked against similar growth-stage companies. Compensation may vary based on geographical location, as certain regions may have different cost-of-living factors. The final offer will also be influenced by the candidate's skills, responsibilities, and relevant experience.

Compensation Range

The Compensation Range for this role is $145,000 - $175,000 DOE.

Umbra is an American space technology company delivering advanced systems, from sensors to spacecraft, that empower customers worldwide with unmatched access to critical information from space. Our mission is simple and ambitious: redefine space—for people, systems, and missions in every domain. Umbra’s ecosystem operates through three business units: Remote Sensing (the data), Space Systems (the components), and Mission Solutions (the platforms). Together, our teams develop capabilities that deliver persistent access, resilient performance, and mission-ready solutions, advancing U.S. space leadership while keeping the world safe and informed.  

About the Team

Umbra’s Information Technology organization operates as a shared service and strategic capability, embedding security, automation, and operational rigor directly into the platforms the business depends on. Security is not an overlay, it is designed, implemented, and evidenced through IT platforms.

About the Role

The Security Operations Engineer is a hands-on technical role responsible for designing, implementing, operating, and continuously improving security controls across Umbra’s corporate technology platforms. This position serves as the primary conduit between Information Security (InfoSec) and IT execution, ensuring security policy is translated into durable, auditable technical controls.

Sitting within Core Infrastructure, this role owns the security configuration control plane for corporate IT: identity, access, email security, data protection, network security, endpoint posture, vulnerability management, logging, and detection. The role partners closely with InfoSec on risk management, program deployment, POA&M execution, and audit readiness.

This is an engineering-first role focused on building and integrating secure-by-default platforms, not a SOC-only or alert-triage position.

This position is based on-site in either our Arlington, VA office or Reston, VA office.

Key Responsibilities

• Security Engineering: Design, implement, and operate technical security controls across identity, endpoint, network, cloud, email, and SaaS environments, translating InfoSec policies and standards into enforceable configurations and platform guardrails.
• Vulnerability Management: Own the technical vulnerability management lifecycle across corporate IT platforms, including scanning and coverage, risk-based prioritization, remediation coordination, validation, exception tracking, and reporting.
• Administer vulnerability scanning tools and partner with infrastructure and application owners to drive remediation of vulnerabilities, configuration issues, and critical or actively exploited exposures.
• Email Security: Design and maintain email security controls, including SPF, DKIM, DMARC, secure mail routing, monitoring, and protection against phishing, spoofing, and domain abuse.
• Data Loss Prevention: Design, implement, and tune DLP controls across email, endpoints, cloud storage, messaging, and SaaS platforms, including controls supporting CUI and other regulated data.
• Identity & Access: Secure and operate IAM capabilities including SSO, MFA, SCIM/JIT, PAM, least-privilege access, and access-review remediation.
• Endpoint Security: Partner with IT teams to implement and maintain security baselines across Windows and macOS environments, including encryption, patching, device trust, and endpoint security tooling.
• Network & Cloud Security: Implement and maintain security controls across network and cloud environments, including segmentation, firewalls, ZTNA/VPN, logging, and cloud security guardrails.
• Detection & Incident Response: Operate and tune security monitoring and detection capabilities, integrating signals across identity, endpoint, email, and DLP platforms and supporting investigation and remediation of security incidents.
• Compliance & Audit Readiness: Maintain technical documentation, configuration artifacts, and evidence supporting NIST, CMMC, FedRAMP, and other applicable security and compliance requirements.
• Automation & Continuous Improvement: Automate security controls, vulnerability management, evidence collection, and compliance workflows to improve reliability and reduce manual effort.
• Cross-Functional Collaboration: Partner closely with InfoSec, Core Infrastructure, Digital Workplace, Enterprise Applications, Legal, and other stakeholders to implement security requirements and remediate technical risks.
• Participate in security-related change reviews, CABs, and other governance forums as needed.
• Perform other duties as assigned.

Requirements

Required Qualifications

• 5+ years of experience in security engineering, security operations, or infrastructure security roles.
• Hands-on experience managing the vulnerability lifecycle, including authenticated scanning, finding validation, risk-based prioritization, remediation coordination, and verification of closure.
• Strong hands-on experience designing and deploying:
• Email authentication: SPF, DKIM, and DMARC
• Enterprise DLP controls
• Strong hands-on experience implementing security controls across:
• Identity & Access Management
• Endpoint management (Windows/macOS)
• Network and cloud platforms
• Demonstrated ability to translate security policy into enforceable technical implementation.
• Experience coordinating patches, upgrades, and configuration changes across technical teams while balancing security risk, operational availability, and change-management requirements.
• Experience supporting & automating audit and compliance evidence collection.
• Strong troubleshooting and incident response skills.

Desired Qualifications

• 10+ years of experience in security engineering, security operations, or infrastructure security roles.
• Experience with vulnerability assessment platforms, such as Tenable/Nessus, and patch management tooling, such as BigFix.
• Experience with Okta: IdP, SSO, MFA, SCIM, and workflows.
• Strong hands on experience designing and deploying eDiscovery and retention workflows.
• Experience with FortiGate & Cisco network technologies.
• Strong understanding of TCP/IP, DNS, HTTP/S, VPNs, SD-WAN, and routing/switching.
• Experience deploying DLP in regulated environments.
• Familiarity with NIST, CMMC, and FedRAMP.
• Experience automating security controls, vulnerability remediation workflows, or evidence collection.
• Exposure to cloud security tooling and observability platforms.
• Proficiency in Python, Bash, or PowerShell.

Benefits

• Flexible Time Off, Sick, Family & Medical Leave
• Medical, Dental, Vision, Life, LTD, STD (employer funded)
• Vol Life, Critical Illness, Accidental, Hospital Indemnity, Pet Insurance (employee funded)
• 401k with 3% non-elective company contribution
• Stock Options
• Free Parking
• Free lunch daily in office

Umbra is an Equal Opportunity Employer. We do not discriminate in hiring on the basis of sex, gender identity, sexual orientation, race, color, religious creed, national origin, physical or mental disability, protected veteran status, or any other characteristic protected by federal, state, or local law.

Employment Eligibility Verification

In compliance with federal laws, all hired persons will be required to verify their identity and eligibility to work in the United States by completing the required Employment Eligibility Verification Form (I-9 Form) upon hire.

ITAR/EAR Requirements

This position may include access to technology and/or data that is subject to U.S. export controls pursuant to ITAR and EAR. To comply with federal export controls, all persons hired must be a U.S. citizen, U.S. national, U.S. lawful permanent resident, refugee or asylee as defined by 8 U.S.C. § 1324b(a)(3), or must otherwise be eligible to obtain the required authorizations from the U.S. Department of State and/or U.S. Department of Commerce as applicable.

Pay Transparency

This job posting may cover multiple career levels. To ensure greater transparency, we provide base salary ranges for all roles, regardless of location. Our standard pay ranges are based on the role’s function and level, benchmarked against similar growth-stage companies. Compensation may vary based on geographical location, as certain regions may have different cost-of-living factors. The final offer will also be influenced by the candidate's skills, responsibilities, and relevant experience.

Compensation Range

The Compensation Range for this role is $145,000 - $175,000 DOE.

Job Description:
We are looking for an experienced Security Operations Engineer to join an enterprise security team focused on strengthening and modernizing security capabilities across the organization. This is a hands-on engineering role for someone who can design and implement security controls while also helping improve threat detection, incident response, automation, and overall security operations.

Responsibilities

• Design, implement, and maintain security controls across cloud, endpoint, server, network, identity, database, and SaaS environments.

• Evaluate and deploy security technologies to address emerging threats and improve the organization's overall security posture.

• Identify gaps in existing security architecture and recommend and implement improvements.

• Support threat detection, incident response, investigations, containment, remediation, and recovery.

• Improve security operations through automation, scripting, and AI-assisted workflows.

• Help secure AI-enabled technologies, including data protection, access controls, API security, prompt injection risks, and monitoring.

• Partner with infrastructure, cloud, application development, risk, audit, and compliance teams.

• Develop security standards, procedures, playbooks, and technical documentation.

• Stay current on emerging attack techniques, vulnerabilities, AI-related security risks, and defensive technologies.

• Provide technical guidance and mentorship to junior team members.

Qualifications

• 6+ years of experience in cybersecurity, security engineering, or security operations within enterprise environments.

• Strong hands-on background with enterprise infrastructure, endpoint security, networking, and cloud security.

• Strong knowledge of Active Directory, Windows/Linux environments, identity security, and system hardening.

• Experience with EDR platforms, threat detection, incident response, and security configuration management.

• Experience securing AWS, Azure, GCP, or other public cloud environments.

• Experience using scripting and automation to improve security operations.

• Exposure to securing AI/ML, generative AI, SaaS, or other emerging technology environments.

• Understanding of web application security and Data Loss Prevention (DLP).

• Familiarity with frameworks such as NIST, CIS Controls, MITRE ATT&CK, ISO 27001, and OWASP.

• Strong communication skills with the ability to explain technical security risks to both technical and business stakeholders.

Umbra is an American space technology company delivering advanced systems, from sensors to spacecraft, that empower customers worldwide with unmatched access to critical information from space. Our mission is simple and ambitious: redefine space—for people, systems, and missions in every domain. Umbra’s ecosystem operates through three business units: Remote Sensing (the data), Space Systems (the components), and Mission Solutions (the platforms). Together, our teams develop capabilities that deliver persistent access, resilient performance, and mission-ready solutions, advancing U.S. space leadership while keeping the world safe and informed.  

About the Team

Umbra’s Information Technology organization operates as a shared service and strategic capability, embedding security, automation, and operational rigor directly into the platforms the business depends on. Security is not an overlay, it is designed, implemented, and evidenced through IT platforms.

About the Role

The Security Operations Engineer is a hands-on technical role responsible for designing, implementing, operating, and continuously improving security controls across Umbra’s corporate technology platforms. This position serves as the primary conduit between Information Security (InfoSec) and IT execution, ensuring security policy is translated into durable, auditable technical controls.

Sitting within Core Infrastructure, this role owns the security configuration control plane for corporate IT: identity, access, email security, data protection, network security, endpoint posture, vulnerability management, logging, and detection. The role partners closely with InfoSec on risk management, program deployment, POA&M execution, and audit readiness.

This is an engineering-first role focused on building and integrating secure-by-default platforms, not a SOC-only or alert-triage position.

This position is based on-site in either our Arlington, VA office or Reston, VA office.

Key Responsibilities

• Security Engineering: Design, implement, and operate technical security controls across identity, endpoint, network, cloud, email, and SaaS environments, translating InfoSec policies and standards into enforceable configurations and platform guardrails.
• Vulnerability Management: Own the technical vulnerability management lifecycle across corporate IT platforms, including scanning and coverage, risk-based prioritization, remediation coordination, validation, exception tracking, and reporting.
• Administer vulnerability scanning tools and partner with infrastructure and application owners to drive remediation of vulnerabilities, configuration issues, and critical or actively exploited exposures.
• Email Security: Design and maintain email security controls, including SPF, DKIM, DMARC, secure mail routing, monitoring, and protection against phishing, spoofing, and domain abuse.
• Data Loss Prevention: Design, implement, and tune DLP controls across email, endpoints, cloud storage, messaging, and SaaS platforms, including controls supporting CUI and other regulated data.
• Identity & Access: Secure and operate IAM capabilities including SSO, MFA, SCIM/JIT, PAM, least-privilege access, and access-review remediation.
• Endpoint Security: Partner with IT teams to implement and maintain security baselines across Windows and macOS environments, including encryption, patching, device trust, and endpoint security tooling.
• Network & Cloud Security: Implement and maintain security controls across network and cloud environments, including segmentation, firewalls, ZTNA/VPN, logging, and cloud security guardrails.
• Detection & Incident Response: Operate and tune security monitoring and detection capabilities, integrating signals across identity, endpoint, email, and DLP platforms and supporting investigation and remediation of security incidents.
• Compliance & Audit Readiness: Maintain technical documentation, configuration artifacts, and evidence supporting NIST, CMMC, FedRAMP, and other applicable security and compliance requirements.
• Automation & Continuous Improvement: Automate security controls, vulnerability management, evidence collection, and compliance workflows to improve reliability and reduce manual effort.
• Cross-Functional Collaboration: Partner closely with InfoSec, Core Infrastructure, Digital Workplace, Enterprise Applications, Legal, and other stakeholders to implement security requirements and remediate technical risks.
• Participate in security-related change reviews, CABs, and other governance forums as needed.
• Perform other duties as assigned.

Requirements

Required Qualifications

• 5+ years of experience in security engineering, security operations, or infrastructure security roles.
• Hands-on experience managing the vulnerability lifecycle, including authenticated scanning, finding validation, risk-based prioritization, remediation coordination, and verification of closure.
• Strong hands-on experience designing and deploying:
• Email authentication: SPF, DKIM, and DMARC
• Enterprise DLP controls
• Strong hands-on experience implementing security controls across:
• Identity & Access Management
• Endpoint management (Windows/macOS)
• Network and cloud platforms
• Demonstrated ability to translate security policy into enforceable technical implementation.
• Experience coordinating patches, upgrades, and configuration changes across technical teams while balancing security risk, operational availability, and change-management requirements.
• Experience supporting & automating audit and compliance evidence collection.
• Strong troubleshooting and incident response skills.

Desired Qualifications

• 10+ years of experience in security engineering, security operations, or infrastructure security roles.
• Experience with vulnerability assessment platforms, such as Tenable/Nessus, and patch management tooling, such as BigFix.
• Experience with Okta: IdP, SSO, MFA, SCIM, and workflows.
• Strong hands on experience designing and deploying eDiscovery and retention workflows.
• Experience with FortiGate & Cisco network technologies.
• Strong understanding of TCP/IP, DNS, HTTP/S, VPNs, SD-WAN, and routing/switching.
• Experience deploying DLP in regulated environments.
• Familiarity with NIST, CMMC, and FedRAMP.
• Experience automating security controls, vulnerability remediation workflows, or evidence collection.
• Exposure to cloud security tooling and observability platforms.
• Proficiency in Python, Bash, or PowerShell.

Benefits

• Flexible Time Off, Sick, Family & Medical Leave
• Medical, Dental, Vision, Life, LTD, STD (employer funded)
• Vol Life, Critical Illness, Accidental, Hospital Indemnity, Pet Insurance (employee funded)
• 401k with 3% non-elective company contribution
• Stock Options
• Free Parking
• Free lunch daily in office

Umbra is an Equal Opportunity Employer. We do not discriminate in hiring on the basis of sex, gender identity, sexual orientation, race, color, religious creed, national origin, physical or mental disability, protected veteran status, or any other characteristic protected by federal, state, or local law.

Employment Eligibility Verification

In compliance with federal laws, all hired persons will be required to verify their identity and eligibility to work in the United States by completing the required Employment Eligibility Verification Form (I-9 Form) upon hire.

ITAR/EAR Requirements

This position may include access to technology and/or data that is subject to U.S. export controls pursuant to ITAR and EAR. To comply with federal export controls, all persons hired must be a U.S. citizen, U.S. national, U.S. lawful permanent resident, refugee or asylee as defined by 8 U.S.C. § 1324b(a)(3), or must otherwise be eligible to obtain the required authorizations from the U.S. Department of State and/or U.S. Department of Commerce as applicable.

Pay Transparency

This job posting may cover multiple career levels. To ensure greater transparency, we provide base salary ranges for all roles, regardless of location. Our standard pay ranges are based on the role’s function and level, benchmarked against similar growth-stage companies. Compensation may vary based on geographical location, as certain regions may have different cost-of-living factors. The final offer will also be influenced by the candidate's skills, responsibilities, and relevant experience.

Compensation Range

The Compensation Range for this role is $145,000 - $175,000 DOE.

Umbra is an American space technology company delivering advanced systems, from sensors to spacecraft, that empower customers worldwide with unmatched access to critical information from space. Our mission is simple and ambitious: redefine space—for people, systems, and missions in every domain. Umbra’s ecosystem operates through three business units: Remote Sensing (the data), Space Systems (the components), and Mission Solutions (the platforms). Together, our teams develop capabilities that deliver persistent access, resilient performance, and mission-ready solutions, advancing U.S. space leadership while keeping the world safe and informed.  

About the Team

Umbra’s Information Technology organization operates as a shared service and strategic capability, embedding security, automation, and operational rigor directly into the platforms the business depends on. Security is not an overlay, it is designed, implemented, and evidenced through IT platforms.

About the Role

The Security Operations Engineer is a hands-on technical role responsible for designing, implementing, operating, and continuously improving security controls across Umbra’s corporate technology platforms. This position serves as the primary conduit between Information Security (InfoSec) and IT execution, ensuring security policy is translated into durable, auditable technical controls.

Sitting within Core Infrastructure, this role owns the security configuration control plane for corporate IT: identity, access, email security, data protection, network security, endpoint posture, vulnerability management, logging, and detection. The role partners closely with InfoSec on risk management, program deployment, POA&M execution, and audit readiness.

This is an engineering-first role focused on building and integrating secure-by-default platforms, not a SOC-only or alert-triage position.

This position is based on-site in either our Arlington, VA office or Reston, VA office.

Key Responsibilities

• Security Engineering: Design, implement, and operate technical security controls across identity, endpoint, network, cloud, email, and SaaS environments, translating InfoSec policies and standards into enforceable configurations and platform guardrails.
• Vulnerability Management: Own the technical vulnerability management lifecycle across corporate IT platforms, including scanning and coverage, risk-based prioritization, remediation coordination, validation, exception tracking, and reporting.
• Administer vulnerability scanning tools and partner with infrastructure and application owners to drive remediation of vulnerabilities, configuration issues, and critical or actively exploited exposures.
• Email Security: Design and maintain email security controls, including SPF, DKIM, DMARC, secure mail routing, monitoring, and protection against phishing, spoofing, and domain abuse.
• Data Loss Prevention: Design, implement, and tune DLP controls across email, endpoints, cloud storage, messaging, and SaaS platforms, including controls supporting CUI and other regulated data.
• Identity & Access: Secure and operate IAM capabilities including SSO, MFA, SCIM/JIT, PAM, least-privilege access, and access-review remediation.
• Endpoint Security: Partner with IT teams to implement and maintain security baselines across Windows and macOS environments, including encryption, patching, device trust, and endpoint security tooling.
• Network & Cloud Security: Implement and maintain security controls across network and cloud environments, including segmentation, firewalls, ZTNA/VPN, logging, and cloud security guardrails.
• Detection & Incident Response: Operate and tune security monitoring and detection capabilities, integrating signals across identity, endpoint, email, and DLP platforms and supporting investigation and remediation of security incidents.
• Compliance & Audit Readiness: Maintain technical documentation, configuration artifacts, and evidence supporting NIST, CMMC, FedRAMP, and other applicable security and compliance requirements.
• Automation & Continuous Improvement: Automate security controls, vulnerability management, evidence collection, and compliance workflows to improve reliability and reduce manual effort.
• Cross-Functional Collaboration: Partner closely with InfoSec, Core Infrastructure, Digital Workplace, Enterprise Applications, Legal, and other stakeholders to implement security requirements and remediate technical risks.
• Participate in security-related change reviews, CABs, and other governance forums as needed.
• Perform other duties as assigned.

Requirements

Required Qualifications

• 5+ years of experience in security engineering, security operations, or infrastructure security roles.
• Hands-on experience managing the vulnerability lifecycle, including authenticated scanning, finding validation, risk-based prioritization, remediation coordination, and verification of closure.
• Strong hands-on experience designing and deploying:
• Email authentication: SPF, DKIM, and DMARC
• Enterprise DLP controls
• Strong hands-on experience implementing security controls across:
• Identity & Access Management
• Endpoint management (Windows/macOS)
• Network and cloud platforms
• Demonstrated ability to translate security policy into enforceable technical implementation.
• Experience coordinating patches, upgrades, and configuration changes across technical teams while balancing security risk, operational availability, and change-management requirements.
• Experience supporting & automating audit and compliance evidence collection.
• Strong troubleshooting and incident response skills.

Desired Qualifications

• 10+ years of experience in security engineering, security operations, or infrastructure security roles.
• Experience with vulnerability assessment platforms, such as Tenable/Nessus, and patch management tooling, such as BigFix.
• Experience with Okta: IdP, SSO, MFA, SCIM, and workflows.
• Strong hands on experience designing and deploying eDiscovery and retention workflows.
• Experience with FortiGate & Cisco network technologies.
• Strong understanding of TCP/IP, DNS, HTTP/S, VPNs, SD-WAN, and routing/switching.
• Experience deploying DLP in regulated environments.
• Familiarity with NIST, CMMC, and FedRAMP.
• Experience automating security controls, vulnerability remediation workflows, or evidence collection.
• Exposure to cloud security tooling and observability platforms.
• Proficiency in Python, Bash, or PowerShell.

Benefits

• Flexible Time Off, Sick, Family & Medical Leave
• Medical, Dental, Vision, Life, LTD, STD (employer funded)
• Vol Life, Critical Illness, Accidental, Hospital Indemnity, Pet Insurance (employee funded)
• 401k with 3% non-elective company contribution
• Stock Options
• Free Parking
• Free lunch daily in office

Umbra is an Equal Opportunity Employer. We do not discriminate in hiring on the basis of sex, gender identity, sexual orientation, race, color, religious creed, national origin, physical or mental disability, protected veteran status, or any other characteristic protected by federal, state, or local law.

Employment Eligibility Verification

In compliance with federal laws, all hired persons will be required to verify their identity and eligibility to work in the United States by completing the required Employment Eligibility Verification Form (I-9 Form) upon hire.

ITAR/EAR Requirements

This position may include access to technology and/or data that is subject to U.S. export controls pursuant to ITAR and EAR. To comply with federal export controls, all persons hired must be a U.S. citizen, U.S. national, U.S. lawful permanent resident, refugee or asylee as defined by 8 U.S.C. § 1324b(a)(3), or must otherwise be eligible to obtain the required authorizations from the U.S. Department of State and/or U.S. Department of Commerce as applicable.

Pay Transparency

This job posting may cover multiple career levels. To ensure greater transparency, we provide base salary ranges for all roles, regardless of location. Our standard pay ranges are based on the role’s function and level, benchmarked against similar growth-stage companies. Compensation may vary based on geographical location, as certain regions may have different cost-of-living factors. The final offer will also be influenced by the candidate's skills, responsibilities, and relevant experience.

Compensation Range

The Compensation Range for this role is $145,000 - $175,000 DOE.