Posted 1 d agoFirst seen 1 d ago
SecOps Engineer - Secret clearance - travel role
·Oklahoma City, United States·via Workable
Posted by PGTEK on 13 November 2026. Still on their Workable board when we checked 13 min ago. Half of PGTEK's roles come down within 49 days.
midFull time
What the posting is about
PGTEK seeks a mid-level SecOps Engineer with Elastic Stack experience to support federal cybersecurity initiatives. This role combines hands-on security engineering, operational monitoring, and compliance support. It requires active Secret Clearance and involves weekly travel to DISA locations.
Your experience, ready for this role
Answer a few questions about your real work. Review the additions and download your CV.
Read out of the posting
Levelmid
Experience askedNot stated
EmploymentFull time
LocationOklahoma City, United States
Work arrangementNot stated
Visa sponsorshipNot stated
SalaryNot extracted, check the posting
Posted2026-11-13
Found viaworkable, direct from their system
We saw it 18 hours after it went up.
The posting, as the company wrote it
Employment: Full-time
Experience: Mid-Senior level
Security Operations (SecOps) Engineer
Active Secret Clearance Required
Location: Hybrid – Must reside near a primary DISA DHMC site
Possible Locations:
Oklahoma City, OK
Montgomery, AL
Ogden, UT
Mechanicsburg, PA
Travel: Yes – Weekly travel to DISA locations (you will work out of your local DISA site when not traveling)
Salary Range: $110,000 – $145,000
Position Summary:
We are seeking a Security Operations (SecOps) Engineer to support federal cybersecurity initiatives across enterprise and cloud environments. This role combines hands-on security engineering, operational monitoring, and compliance support to ensure systems remain secure, observable, and audit-ready throughout their lifecycle.
The ideal candidate will have strong experience with Elastic / ELK Stack technologies , security monitoring, and federal compliance frameworks. This role partners closely with DevOps, SRE, and compliance teams to integrate detection, response, and automation into production systems.
Key Responsibilities:
Security Operations & Monitoring
Monitor, investigate, and respond to security alerts and incidents using Elastic Security (SIEM/XDR)
Design, deploy, and maintain the Elastic Stack (Elasticsearch, Logstash, Beats, Kibana)
Develop and tune detection rules, dashboards, and alerting workflows
Conduct threat hunting and advanced log analysis
Vulnerability & Patch Management
Perform vulnerability scanning and analysis using tools such as ACAS / Tenable
Track and remediate vulnerabilities in accordance with federal timelines
Coordinate patching and mitigation efforts with infrastructure and application teams
Compliance & Continuous Monitoring
Implement and maintain controls aligned with NIST 800-53, FISMA, and FedRAMP
Support ATO (Authority to Operate) activities including documentation and evidence collection
Produce compliance and CDM reporting using Elastic dashboards and data feeds
Secure Engineering & Automation
Integrate security monitoring and logging into CI/CD pipelines and Infrastructure-as-Code
Automate ingestion, enrichment, and response workflows using Python, Bash, or PowerShell
Enforce secure configuration baselines (STIGs, CIS benchmarks)
Collaboration & Risk Management
Partner with DevOps and SRE teams to embed security observability into system design
Advise stakeholders on risk posture, detections, and mitigation strategies
Communicate technical findings to both technical and non-technical audiences
Requirements
Hands-on production experience with the Elastic Stack (ELK)
Direct experience using Elastic Security as a SIEM/XDR platform
Log pipeline design, parsing, enrichment, and lifecycle management
Security event monitoring, alert triage, and incident response
Linux and Windows security administration
Scripting or automation experience ( Python, Bash, or PowerShell )
Experience in cloud or hybrid environments (AWS, Azure, GCP, or GovCloud)
Security & Compliance Knowledge
Strong familiarity with:
NIST 800-53, 800-61, 800-137
FISMA federal cybersecurity requirements
FedRAMP control implementation and monitoring
Experience supporting audits, assessments, or ATO packages
Active Secret Clearance
Preferred Qualifications:
Experience deploying Elastic in DoD or federal environments
Integration with cloud-native logging tools (CloudTrail, Azure Monitor, GCP Logs)
Familiarity with DevSecOps and Site Reliability Engineering (SRE) practices
Container and Kubernetes security experience
Certifications (Preferred)
Elastic Certified Engineer or Analyst
Security+
CySA+
CISSP
Benefits
Our comprehensive benefits package for full-time salaried employees is effective immediately upon the start date. Benefits include comprehensive PPO medical coverage with access to a Health Savings Account (HSA) option, a vision plan, and dental insurance with the base dental plan option paid for by PGTEK. Life Insurance, Short and Long-Term disability, and Critical Illness insurance have premiums covered. Additionally, PGTEK offers a matching 401(k) plan and a discount on pet insurance through ASPCA Pet Insurance. An Employee Assistance Program is available at no cost to all employees. PGTEK offers a generous amount of PTO and Holidays, and an Education Assistance Program is available after 12 months of employment.
ABOUT PGTEK:
PGTEK is a true consulting organization dedicated to helping clients achieve their business and technology objectives utilizing our decades of experience and business relationships. PGTEK invests in the educational advancements of our staff by providing the necessary resources to complete Professional and Business Certifications. Our company is our people, and we treat them like family.
EOE, including disability/veterans
Why this page exists
We read companies’ own hiring systems every hour, 2,106 of them, and show a job the hour it opens instead of when a job board gets around to indexing it. We saw it 18 hours after it went up.
The feed is free. No card, no trial to expire.
A free account first, no card