Information Systems Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop, implement, and uphold security policies, procedures, and controls that align with USPS security requirements and federal standards.

• Utilize AI tools like GitHub Copilot to automate security tasks, conduct vulnerability scans, and perform code reviews.

• Execute security assessments, vulnerability scans, and penetration testing using tools such as Nessus, Splunk, and SonarQube.

• Establish and oversee security measures for sensitive data, including encryption standards and access controls.

• Incorporate security practices into CI/CD pipelines and DevSecOps processes in collaboration with development and operations teams.

• Create and maintain System Security Plans, Risk Mitigation Plans, and Plans of Action and Milestones.

• Ensure continuous monitoring and prompt security incident response utilizing CloudWatch, GuardDuty, and AWS Security Hub.

• Partner with the USPS Chief Information Security Office on security architecture and compliance with governance standards.

• Provide security training and awareness initiatives for development and operational personnel.

• Assist in the modernization of the Delivery Operations Information System for the United States Postal Service.

⛳️ Requirements

• More than 5 years of experience in Application Modernization.

• 5+ years of experience in information security engineering, with a strong emphasis on cloud security.

• Familiarity with AI tools, particularly GitHub Copilot, for security automation and vulnerability management.

• In-depth understanding of federal security standards and compliance requirements, such as FISMA, NIST, and FedRAMP.

• Proficient in security tools and frameworks, including Nessus, Splunk, and NIST RMF.

• Exceptional analytical, problem-solving, and communication abilities.

• Capability to manage multiple tasks efficiently and adhere to deadlines.

• Ability to work collaboratively with developers, business analysts, and stakeholders.

• Preferred: Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field, though not mandatory.

• If lacking a relevant college degree, an additional 4 years of pertinent work experience is required.

• Must be able to obtain and maintain a Public Trust.

• Must successfully complete a government background screening process, including detailed forms and fingerprinting.

• U.S. residency requirement: the selected candidate must have lived in the U.S. or U.S. Territories for the past five years, adhering to stated absence limits.

• Travel required: less than 10%.

🏝️ Benefits

• 401K with company match.

• Comprehensive health and wellness packages.

• Internal mobility support.

• Paid education and certifications.

• Opportunities for learning cutting-edge technology.

• Paid vacation and holidays.

• Medical plan options, some with Health Savings Accounts.

• Dental plan options.

• Vision plan.

• Flexible work weeks when feasible.

• Paid time off, including vacation, sick, personal, parental, military, bereavement, and jury duty leave.

• Up to 160 hours of paid family leave in a rolling 12-month period for eligible employees.

• Short- and long-term disability benefits.

• Life insurance.

• Accidental death and dismemberment insurance.

• Personal accident insurance.

• Critical illness insurance.

• Business travel and accident insurance.