Fantom Corporation is a mission-focused organization supporting critical programs across the defense and intelligence community. We partner with our customers to deliver high-impact technical solutions while fostering a culture built on trust, expertise, and long-term career growth.
Must possess an active Top Secret Clearance
Must be willing and able to obtain a polygraph
Education: Bachelor’s degree required Experience: Minimum of 10 years of relevant experience
Position Summary
We are seeking a Security Engineer to protect enterprise applications, cloud platforms, networks, and supporting infrastructure. This role combines application security testing, threat monitoring, incident response planning, cyber resiliency, and secure cloud operations.
The engineer identifies vulnerabilities, implements monitoring and alerting capabilities, and safeguards critical data and Internet communications. The position also manages communications security resources, supports compliance activities, and collaborates with industry partners to advise government stakeholders on security risks and recommended improvements.
Responsibilities
• Secure multiple applications and platforms, identifying critical data, vulnerabilities, and potential exposure points.
• Develop and maintain incident response and recovery plans to support cyber resiliency and operational continuity.
• Perform web application and platform security testing, document findings, and recommend corrective actions.
• Design and implement monitoring and alerting capabilities to detect anomalous activity across applications and infrastructure.
• Monitor and correlate security data from multiple systems to support threat detection, investigation, remediation, and continuous improvement.
• Coordinate with industry partners to advise government stakeholders on vulnerabilities and security recommendations.
• Install, operate, maintain, and upgrade secure cloud computing environments, platforms, software, and core infrastructure.
• Build and improve cloud networks and cloud-based systems in accordance with defense-in-depth security policies and governance guidelines.
• Manage communications security (COMSEC) resources consistent with CNSSI 4009 terminology, or serve as a key custodian for a cryptographic key management system (CKMS).
• Protect organizational websites, Internet transactions, confidential order information, and external business-to-business connections.
• Implement and maintain firewall and encryption technologies to protect organizational and customer information.
• Administer user accounts and access permissions, including account updates and deletions.
• Monitor compliance violations, investigate findings, and follow up on corrective actions.
• Develop and maintain security policies, practices, procedures, and guidelines.
Required Qualifications
• Must possess an active Top Secret Clearance
- Must be willing and able to obtain a polygraph
• Minimum of 10 years of relevant experience in security engineering, cybersecurity, application security, cloud security, or related technical disciplines.
• Experience securing multiple applications and identifying critical data and vulnerability points.
• Ability to develop incident response and recovery plans.
• Knowledge of cyber resiliency, security planning, and web application and platform security testing.
• Experience designing security monitoring and alerting capabilities and investigating anomalous activity.
• Ability to correlate security data to detect threats, guide remediation, and recommend system improvements.
• Experience operating, maintaining, upgrading, and securing cloud infrastructure, platforms, networks, and software.
• Understanding of defense-in-depth principles and security governance requirements.
• Experience managing COMSEC resources or performing cryptographic key custodial duties.
• Knowledge of firewall technologies, encryption, website security, and secure Internet communications.
• Experience administering user access, addressing compliance violations, and developing security policies and procedures.
• Strong analytical, troubleshooting, and communication skills.
• Ability to explain security findings and recommendations to government stakeholders and industry partners.
#CJ
Fantom Corp is a Software Development, Agile Cloud, Software Development, Cyber Security (Risk Management, Assessments & Authorization (A&A)), Data, AI Platform (Computer Vision Models), Podcasting Media Services, and IT Services provider. Established in 2015, Fantom Corp serves Federal customers with top-notch Cybersecurity Architects, Data Scientists/Analysts, Software Engineers/Developers, DevSecOps Engineers, Project Managers, Identity, Credential Access Management (ICAM) services , and Cloud-certified practitioners. We excel in delivering emerging technologies such as Artificial Intelligence (AI) and Machine Learning (ML) with a focus on identifying trends, object detection, and classification of structured and unstructured data. Fantom Corp possesses mastery in all aspects of digital audio production. We lead in the ideation and creation of efforts for clients who want to harness the power of podcasting. We guide them in selecting the right show format for their needs and goals. As a Small Business, we possess the innovation, speed and flexibility to meet your requirements.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
