Network Security Engineering (Hybrid)

Overview

BRMi is seeking a Network Security Engineering  to join our Cybersecurity Technology Services team, with a focus on Microsoft Defender, Palo Alto Networks Security Configuration Management (SCM), and cloud security platforms. This role will be responsible for building and maintaining automation, integrations, and tooling that enhance our security posture across endpoint, network, and cloud environments.

**Hybrid in Vienna, VA, Pensacola, FL, or Winchester, VA**

**In person interviews will be required for this role**

Benefits:• Comprehensive Medical, Dental, and Vision Insurance• Employer-Paid Life Insurance• Employer-Paid Short-Term and Long-Term Disability Insurance• 401(k) • Paid Time Off (PTO) that includes Vacation Leave, Sick Leave, and 11 Paid Holidays• Educational Assistance

Salary: 90k-115k

Click here to learn about BRMi's culture.

Click here to see BRMi’s Glassdoor reviews

Responsibilities

• Develop and maintain automation scripts and applications to support security operations, configuration management, and policy enforcement across Microsoft Defender, Palo Alto SCM, and cloud platforms (Azure, AWS, GCP).
• Integrate APIs from Microsoft Defender XDR, Palo Alto Panorama/SCM, and cloud-native security tools (e.g., Azure Security Center, AWS Security Hub) into internal systems and dashboards.
• Build and maintain data pipelines for ingesting and normalizing logs into SIEM platforms (e.g., Microsoft Sentinel, Splunk).
• Collaborate with cloud and security engineers to implement secure configurations, monitor compliance, and respond to threats in hybrid environments.
• Automate remediation workflows and support SOAR integrations for incident response.
• Monitor platform health, performance, and configuration drift across cloud and on-prem environments.
• Document code, integration processes, and platform configurations for operational transparency and audit readiness.
• Perform other duties as assigned

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
• Proficiency in scripting/programming languages such as Python, PowerShell, Bash, or Go.
• Experience with Microsoft Defender APIs, Palo Alto Networks SCM/Panorama APIs, and cloud security APIs (Azure, AWS, or GCP).
• Solid understanding of cloud security principles, IAM, network segmentation, and compliance frameworks.
• Familiarity with infrastructure-as-code (IaC) and automation tools (e.g., Terraform, Hugo, GitHub).
• Experience with SIEM and SOAR platforms.

Desired:

• Certifications such as Microsoft Certified: Azure Security Engineer Associate, PCNSE, AWS Certified Security – Specialty, or CISSP.
• Experience with hybrid cloud environments and multi-cloud security architectures.
• Knowledge of MITRE ATT&CK, CIS Benchmarks, and NIST frameworks.
• Experience with DevSecOps pipelines and CI/CD security integration.

** BRMi will not sponsor applicants for work visas for this position.**

**This is a W2 opportunity only**

EOE/Minorities/Females/Vet/Disabled 

We are an equal opportunity employer that values diversity and commitment at all levels. All individuals, regardless of personal characteristics, are encouraged to apply. Employment policies and decisions on employment and promotion are based on merit, qualifications, performance, and business needs. The decisions and criteria governing the employment relationship with all employees are made in a nondiscriminatory manner, without regard to race, religion, color, national origin, sex, age, marital status, physical or mental disability, medical condition, veteran status, or any other factor determined to be unlawful by federal, state, or local statutes.