Fairfax, VAremote

Salary
$97,968–$120,750from the description
Posted
Jul 14, 2026
Location
Fairfax, VA
Last confirmed open
Jul 21, 2026

What this job asks for AI summary

A senior cybersecurity engineering role focused on administering and maintaining network security tools — primarily Cisco FirePower/FTD, SkyHigh Web Gateway, CrowdStrike Falcon, and Palo Alto NGFW — within a federal cloud environment supporting a CMS healthcare quality program. Day-to-day work spans IPS configuration, threat analysis, vulnerability assessments, SIEM integration via Splunk, and coordinating with SOC and application teams. Suits an experienced cloud security engineer with a strong AWS background.

Senior level · 5+ years · Remote · Full-time

Must have (8)
Cisco FirePowerAWSSkyHigh Web Gateway or Mcafee Web GatewaySplunkAWS GuardDutyAWS Security HubAWS InspectorSTIG or Usgcb
Nice to have (5)
CrowdStrike FalconPalo Alto NGFWSnykAWS Certified Security Specialty or CISSPCIS Benchmarks

“or” means any one of them counts — you don't need all of them.

Posted 2 times — it's one opening, so apply once.

We read this from the posting text with AI. Skim the description below before ruling yourself out.

How this req sits in the market our data

What won't set you apart
Splunk45%

Most people in this occupation already list these. Still required — just not what gets you shortlisted.

What the occupation pays Median $132,021 (middle half $99,961–$167,095). This posting is about at that midpoint.

Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.

Why we read it this way (8)

A Bachelor's degree in Computer Science or related field is listed, but the JD explicitly accepts 'the equivalent combination of education, technical certifications or training, or work experience' — degree requirement is therefore treated as None.

The posting requires the ability to obtain and maintain a Public Trust background investigation, but this is not a formal US security clearance (Confidential/Secret/TS); the clearance requirement is set to None accordingly.

SkyHigh Web Gateway is the current product name (formerly McAfee Web Gateway); McAfee Web Gateway is listed as an alternative since the job family skills tag still references it.

USGCB is listed as an alternative to STIG since the JD groups them together as equivalent system hardening benchmarks in the required skills section.

CrowdStrike Falcon, Palo Alto NGFW, and Snyk appear only under 'Preferred Skills' and are marked preferred accordingly.

AWS GuardDuty, Security Hub, and Inspector are explicitly called out as required ('Must possess background in AWS Security services including Guard Duty, Security Hub, Inspector') and are marked required.

The role sits at the boundary between Information Security Analyst (15-1212) and Network/Systems Administration (15-1244) given the heavy focus on configuring and maintaining network security appliances (FirePower, NGFW, Web Gateway); 15-1212 is chosen as primary because threat analysis, incident response, vulnerability assessment, and security policy management are the dominant activities.

This posting reads as a fully-remote role, so it was scored against the national candidate pool rather than a single metro.

Read the full posting

The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.

Apply

Apply on employer site ↗