SecOps Engineer

Security Operations (SecOps) Engineer Active Secret Clearance Required Location: Hybrid – Must reside near a primary DISA DHMC site Possible Locations: Oklahoma City, OK Montgomery, AL Ogden, UT Mechanicsburg, PA Travel: Yes – Weekly travel to DISA locations (you will work out of your local DISA site when not traveling) Salary Range: $110,000 – $145,000 Position Summary: We are seeking a Security Operations (SecOps) Engineer to support federal cybersecurity initiatives across enterprise and cloud environments. This role combines hands-on security engineering, operational monitoring, and compliance support to ensure systems remain secure, observable, and audit-ready throughout their lifecycle. The ideal candidate will have strong experience with Elastic / ELK Stack technologies, security monitoring, and federal compliance frameworks. This role partners closely with DevOps, SRE, and compliance teams to integrate detection, response, and automation into production systems. Key Responsibilities: Security Operations & Monitoring Monitor, investigate, and respond to security alerts and incidents using Elastic Security (SIEM/XDR) Design, deploy, and maintain the Elastic Stack (Elasticsearch, Logstash, Beats, Kibana) Develop and tune detection rules, dashboards, and alerting workflows Conduct threat hunting and advanced log analysis Vulnerability & Patch Management Perform vulnerability scanning and analysis using tools such as ACAS / Tenable Track and remediate vulnerabilities in accordance with federal timelines Coordinate patching and mitigation efforts with infrastructure and application teams Compliance & Continuous Monitoring Implement and maintain controls aligned with NIST 800-53, FISMA, and FedRAMP Support ATO (Authority to Operate) activities including documentation and evidence collection Produce compliance and CDM reporting using Elastic dashboards and data feeds Secure Engineering & Automation Integrate security monitoring and logging into CI/CD pipelines and Infrastructure-as-Code Automate ingestion, enrichment, and response workflows using Python, Bash, or PowerShell Enforce secure configuration baselines (STIGs, CIS benchmarks) Collaboration & Risk Management Partner with DevOps and SRE teams to embed security observability into system design Advise stakeholders on risk posture, detections, and mitigation strategies Communicate technical findings to both technical and non-technical audiences Hands-on production experience with the Elastic Stack (ELK) Direct experience using Elastic Security as a SIEM/XDR platform Log pipeline design, parsing, enrichment, and lifecycle management Security event monitoring, alert triage, and incident response Linux and Windows security administration Scripting or automation experience (Python, Bash, or PowerShell) Experience in cloud or hybrid environments (AWS, Azure, GCP, or GovCloud) Security & Compliance Knowledge Strong familiarity with: NIST 800-53, 800-61, 800-137 FISMA federal cybersecurity requirements FedRAMP control implementation and monitoring Experience supporting audits, assessments, or ATO packages Active Secret Clearance Preferred Qualifications: Experience deploying Elastic in DoD or federal environments Integration with cloud-native logging tools (CloudTrail, Azure Monitor, GCP Logs) Familiarity with DevSecOps and Site Reliability Engineering (SRE) practices Container and Kubernetes security experience Certifications (Preferred) Elastic Certified Engineer or Analyst Security+ CySA+ CISSP Our comprehensive benefits package for full-time salaried employees is effective immediately upon the start date. Benefits include comprehensive PPO medical coverage with access to a Health Savings Account (HSA) option, a vision plan, and dental insurance with the base dental plan option paid for by PGTEK. Life Insurance, Short and Long-Term disability, and Critical Illness insurance have premiums covered. Additionally, PGTEK offers a matching 401(k) plan and a discount on pet insurance through ASPCA Pet Insurance. An Employee Assistance Program is available at no cost to all employees. PGTEK offers a generous amount of PTO and Holidays, and an Education Assistance Program is available after 12 months of employment. ABOUT PGTEK: PGTEK is a true consulting organization dedicated to helping clients achieve their business and technology objectives utilizing our decades of experience and business relationships. PGTEK invests in the educational advancements of our staff by providing the necessary resources to complete Professional and Business Certifications. Our company is our people, and we treat them like family. EOE, including disability/veterans