IT Security Engineer

The role

The IT Security Engineer will establish and maintain security infrastructure and protect digital assets. This role involves implementing security solutions across networks, systems, and applications while working with development and operations teams.

What you will do

• Design, implement, and maintain enterprise network security architecture.
• Develop and enforce security policies, standards and procedures.
• Conduct security assessments, vulnerability scans and penetration testing.
• Monitor systems and networks 24/7 using SIEM tools.
• Investigate and respond to security incidents.
• Manage access controls, IAM, and MFA solutions.
• Establish and manage DLP and encryption protocols.
• Perform security hardening of servers, workstations, and endpoints.
• Manage patch management and system updates.
• Provide security awareness training to employees.

Required qualifications

• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent professional experience).
• 5+ years of professional IT security experience.
• Demonstrated expertise in at least two of the following domains: network security, systems security, or cybersecurity.
• Strong knowledge of TCP/IP, DNS, DHCP, and network protocols.
• Experience with firewalls, proxies, and network segmentation.
• Hands-on experience with security tools such as Splunk, ELK Stack, Snort, Suricata, or similar SIEM and IDS/IPS platforms.
• Proficiency in systems security, including endpoint protection and vulnerability management.
• Experience with cloud security (AWS, Azure, or GCP) and containerized environments (Docker, Kubernetes).
• Understanding of common attack vectors and security frameworks (NIST, CIS Controls, OWASP Top 10).
• Excellent problem-solving skills.
• Strong communication skills.

Nice to have

• Security certifications such as CISSP, CISM, CEH, CCNA Security, Security+, or similar.
• Experience with security automation and Infrastructure as Code (Terraform, Ansible).
• Knowledge of application security testing (SAST/DAST) and secure development practices.
• Experience with incident response and forensics investigations.
• Familiarity with compliance frameworks and audit processes.

Benefits

• Medical, dental, and vision plan options.
• Life / AD&D, disability coverage options.
• Paid parental leave for eligible full-time employees.
• 12 weeks for birthing parents, 4 for non-birthing parents, 6 weeks for adoptive, foster, or intended parents through surrogacy.
• Paid holidays and flexible PTO.
• 401(k) with pre-tax and Roth options.
• HSA/FSA options, dependent care FSA.

Before you apply

• Role is limited to U.S. citizens.
• Some positions may require eligibility to obtain and maintain a U.S. Government security clearance.

About the company

Twenty Technologies industrializes offensive cyber operations for the U.S. and its allies. Headquartered in Arlington, Virginia, the company was founded in 2024.