Security & Compliance Engineer

Overview

TriTech Enterprise Systems, Inc. is seeking a Security & Compliance Engineer to support a Maryland State contract. This is an onsite position. The candidate will support and sustain the security posture of various applications hosted on by an executing vulnerability remediation, patch compliance, and audit evidence management. In addition, the candidate will ensure adherence to NIST 800-53, HIPAA, and MARS-E2 standards while collaborating closely with MD THINK's centralized Security Governance and Compliance teams.

Key Responsibilities

• Implement OS and middleware security patches as directed by MD THINK Security.
• Analyze vulnerability reports from Wiz, Tanium, and CloudCheckr, and perform or coordinate remediation.
• Maintain System Security Plan (SSP) evidence and ensure configuration compliance.
• Document audit trails for patching, configuration changes, and access control reviews.
• Prepare monthly and quarterly audit evidence packages in alignment with Fed and State timelines.
• Participate in MD THINK's Security & Compliance Board (SCB) and report posture metrics.
• Support root-cause analysis for security incidents, coordinating with MD THINK SOC.
• Validate hardening baselines for servers and cloud resources (CIS Benchmarks).
• Partner with Cloud Engineer to ensure encrypted backups, DR readiness, and IAM role hygiene.
• Track and close all security-related JIRA tickets within SLA.

Required Qualifications & Experience

Preferred Skills / Certifications

TriTech is an equal opportunity employer!!!

J-18808-Ljbffr