Senior Security Engineer at By Light Professional IT Services LLC
Orlando, FL
—
Jul 22, 2026
Orlando, FL
Jul 24, 2026
What this job asks for AI summary
A senior security engineering role embedded within product scrum teams supporting a DoD range modernization program. Day-to-day work spans vulnerability management (scanning, patching, and hardening across Linux, Windows, VMware, and Cisco environments), governance and compliance activities such as POA&M tracking and risk assessments, and designing or managing security infrastructure including SIEMs, firewalls, and identity systems. Suits experienced cybersecurity engineers comfortable with scripting, automation, and classified DoD network environments.
Senior level · Washington-Arlington-Alexandria, DC-VA-MD-WV · Secret clearance · Full-time
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $152,225 (middle half $125,286–$177,673).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (9)
The clearance requirement states a minimum SECRET with the ability to obtain TOP SECRET; the role is gated on SECRET, so that is the hard requirement captured here.
The posting lists a Bachelor's degree 'or equivalent experience,' so no formal degree is hard-required.
VMware and Cisco appear in the Responsibilities section (patching/hardening context) rather than a formal qualifications block; however, they are explicitly named as operating systems/platforms the engineer must patch and secure, making them genuine operational requirements. VMware also appears under Preferred as a virtualization preference — the Responsibilities mention is treated as the stronger signal.
The scripting requirement (Python, PowerShell, Bash) is listed as a single interchangeable requirement; Python is used as the primary name with PowerShell and Bash as alternatives.
The automation tools requirement (Ansible, Terraform, Chef, Puppet) is listed as a single interchangeable requirement; Ansible is used as the primary name with the others as alternatives.
The compliance frameworks (NIST 800-53, NIST 800-171, SOC 2, ISO 27001) are listed together as a single familiarity requirement; NIST 800-53 is used as the primary name with the others as alternatives.
Open-source security tools appear under Preferred but name no specific tool, so no skill entry is emitted for that item.
The alt SOC (15-1244) is noted because a meaningful portion of the role involves hardening, patching, and operating infrastructure — but the primary framing is security analysis, architecture, and compliance, making 15-1212 the stronger fit.
Requires a Secret clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.