Information Security Engineer
Babel Street · Reston, VA
$100,000–$110,000
Jul 10, 2026
Reston, VA
Jul 21, 2026
What this job asks for AI summary
A hands-on security engineering role focused on day-to-day security operations: monitoring and investigating alerts, responding to incidents such as phishing and identity attacks, and administering tools including Microsoft XDR, CrowdStrike Falcon, and Microsoft Entra ID. The position also involves building scripts, automations, and workflows to improve operational efficiency, and maintaining incident response documentation. Suits candidates with at least three years in security operations and practical scripting experience.
Mid level · 3+ years · Washington-Arlington-Alexandria, DC-VA-MD-WV · Bachelor's required · Full-time
Pay in the description: $100,000–$110,000
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Roughly 370 people in the Washington-Arlington-Alexandria, DC-VA-MD-WV area plausibly meet what this posting asks for (information security analysts). range 160–560
Applicant volume Moderate — A normal amount of company. The rare requirements below are what will separate a shortlisted application from the rest.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $152,225 (middle half $125,286–$177,673). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (7)
The role is titled 'Information Security Engineer' but the day-to-day work — monitoring/investigating alerts, incident response, administering security tooling, and security operations — maps squarely to Information Security Analysts (15-1212). The engineering label reflects the hands-on, automation-heavy nature of the work rather than a distinct software-development occupation.
The degree requirement is a hard gate: the JD lists a specific set of qualifying majors under Required Qualifications with no 'or equivalent experience' escape clause.
AWS, Azure, and GCP are listed together as a single 'working knowledge' requirement in Required Qualifications; AWS is used as the primary name with Azure and GCP as alternatives since all three are named interchangeably.
PowerShell and Python are listed as alternatives under Required Qualifications ('PowerShell, Python, or similar scripting languages'); 'similar scripting languages' is open-ended so no additional named alternatives are added beyond the two explicitly named.
KQL/SPL, Microsoft Graph API, REST APIs, SIEM, MITRE ATT&CK, NIST CSF, and AI coding tools appear under the 'Technical Competencies' section, which is framed as experience the candidate 'should have… or the ability to quickly become proficient in' — aspirational rather than a hard gate.
The 'AI tools' skill (OpenCode, Claude, Gemini, GitHub Copilot, ChatGPT) appears under 'What We're Looking For' as a desired behavior, not a required qualification; no single tool is named as a hard gate.
The posting is headquartered in Reston, VA; no explicit remote option is stated, so remote is set to false. The CBSA reflects the Washington-Arlington-Alexandria metro area.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.