Linux System Security Engineer

We are actively interviewing for the following job. If interested please apply now.

Job Title

Mid-to-Senior Linux System Security Engineer (On-Site)

Location:

Leesburg, VA (5 Days On-Site with Flexible Commute Hours)

Compensation:

$190,000 – $205,000 Base Salary (Flexible based on experience) + 100% Paid Employee Medical + 6% Immediate 401(k) Match

Clearance Requirement:

U.S. Citizenship required; must be able to obtain and maintain a U.S. Government security clearance.

We are looking for a

Mid-to-Senior Linux System Security Engineer

to serve as the right-hand technical partner to our Security Lead. Because of the sensitive nature of our mission, we rely heavily on

on-premises infrastructure

rather than public cloud environments. You will have high visibility, massive autonomy, and direct ownership over designing, hardening, automating, and defending our internal Linux and macOS infrastructure from the ground up.

Why You’ll Love Working Here Long-Term

• Top-Tier Compensation:

$190,000 – $205,000 base salary, with flexibility based on your demonstrated skills and experience.

• Unbeatable Healthcare Coverage:

We pay

100% of your medical insurance premiums

(and 75% for your dependents) through Anthem medical and Guardian dental, alongside full life and disability coverage.

• Immediate Retirement Wealth Building:

6% 401(k) company match with

immediate vesting

from day one.

• Generous Time Off & Growth:

3 weeks of paid vacation, 2 weeks of paid sick leave, 11 paid federal holidays, and up to

$7,000 per year in educational assistance

.

• Common-Sense Commute Flexibility:

While the nature of our on-premises infrastructure requires this role to be in our Leesburg, VA office 5 days a week, we don't believe in rigid clock-watching. Our leadership understands Northern Virginia traffic and supports flexible early-in / early-out schedules so you can beat the rush hour.

What You Will Be Doing

• Own On-Premises Security:

Design, implement, and maintain security practices across our internal infrastructure, with a heavy emphasis on physical, on-premises Linux servers and Apple/macOS endpoints.

• Harden Systems:

Perform deep Linux system hardening, including kernel tuning, service management, and secure infrastructure configuration.

• Automate Everything:

Eliminate manual busywork by automating security tasks, configurations, and deployments using

Ansible

(writing and maintaining playbooks and roles) alongside

Python

and

Shell

scripting.

• Monitor & Mitigate Threats:

Regularly audit systems for vulnerabilities, apply security patches, and manage open-source security monitoring and logging stacks (

Wazuh, Elasticsearch/OpenSearch, Git

).

• Collaborate Across Engineering:

Partner directly with our Security Lead, Compliance Manager, and fellow engineers to align security strategies without slowing down innovation.

What You Need to Succeed (Required)

• Experience & Education:

B.S. in Computer Science, Computer Engineering, or a related technical field, plus

10+ years of hands-on experience

as a Security Engineer, Linux Systems Administrator, or similar role.

• On-Premises Linux & macOS Expertise:

Deep, hands-on proficiency securing

on-premises Linux environments

and

Apple/macOS systems

(candidates whose experience is exclusively cloud-based or Windows-only will not be a fit for our environment).

• Open-Source Security Tooling:

Proven experience working with

Git

,

Wazuh

, and

Elasticsearch

or

OpenSearch

.

• Configuration Management & Scripting:

Strong hands-on experience writing and maintaining

Ansible

playbooks/roles, plus proficiency in

Python

and

Shell/Bash

scripting to build security tools and automate monitoring.

• Network Security Fundamentals:

Solid command of networking protocols (

TCP/IP, DNS, DHCP, VPN

) and network defense, including firewalls, VPNs, and network segmentation.

• Location & Clearance:

Must be a U.S. Citizen able to obtain and maintain a U.S. Government security clearance, and able to work on-site 5 days a week in Leesburg, VA.

Bonus Points (Preferred)

• Familiarity with DNS infrastructure and tools (

BIND, Unbound, and/or PowerDNS

).

• Experience with

Fluent Bit

or

Fluentd

for log collection, processing, and forwarding across distributed environments.

• Hands-on experience with virtualization platforms (

VMware, Proxmox, VirtualBox

).

• Experience with

BSD

operating systems.