Lead Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Collaborate with teams in AI, Enterprise Architecture, and Business Development.

• Aid in the implementation and enhancement of cybersecurity measures to safeguard federal information systems and data.

• Provide support for security operations, compliance efforts, vulnerability management, cloud security initiatives, and system authorization tasks.

• Act as a subject matter expert, advising engineers on the selection, integration, and optimization of Information Security solutions.

• Lead or participate in Information Security projects and operational responsibilities, offering technical leadership and mentorship.

• Implement, configure, and sustain Information Security solutions.

• Coordinate project-level planning across the enterprise, ensuring support, effort levels, and resource alignment.

• Prioritize and guide program execution based on risk assessments, business goals, and organizational impact.

• Provide advice on security measures for cloud, network, and endpoint application environments.

• Conduct security assessments, vulnerability analyses, and remediation tracking.

• Offer guidance on SIEM, EDR, firewalls, and vulnerability scanning technologies.

• Work alongside system administrators, network engineers, and CI/CD Pipeline Engineers to mitigate security risks.

• Develop and maintain security documentation, policies, procedures, and system security plans.

• Suggest enhancements to security posture, compliance, and operational efficiency.

• Support Zero Trust principles, secure configuration management, and cloud security best practices.

• Review proposals and bids for technical compliance.

• Serve as a technical ISO stakeholder in Enterprise Risk and Assurance activities.

• Convey initiatives, solution designs, and security or compliance considerations to ISO leadership.

⛳️ Requirements

• Bachelor’s Degree or equivalent experience with a minimum of 7 years in the field.

• At least 5 years of experience in Security Engineering.

• Experience in a security engineering role with the US Federal government, whether as a current or former federal employee or contractor.

• Familiarity with NIST 800-53 Security and Privacy Controls for Information Systems and Organizations.

• Understanding of NIST 800-171 for Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations.

• Strong expertise in securing CI/CD pipelines.

• Knowledge of network connectivity and security controls.

• Proficient in endpoint security for servers and workstations.

• Understanding of applied Zero Trust principles.

• Experience with vulnerability management and remediation processes.

• Knowledge of cloud security practices within AWS and/or Azure environments.

• US Citizenship is mandatory.

• Willingness to travel up to 10% of the time.

• Preferred certifications include CISSP, CISA, CCSP, CISM, GIAC, AWS Security, or Azure Security.

🏝️ Benefits

• Health insurance coverage.

• Life and disability insurance.

• Retirement savings plan.

• Paid holidays.

• Paid time off.

• Short- and long-term incentives.

• Program-specific awards.

• Reasonable accommodations during the employment process.