Security & Compliance Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Assist in security and compliance efforts across cloud-based platforms.

• Perform and facilitate penetration testing of web applications and vulnerability assessments.

• Aid in the implementation and upkeep of security measures that align with relevant compliance frameworks.

• Engage with cloud platforms like AWS GovCloud; experience with GCP or Azure is also valued.

• Contribute to the creation of security documentation, assessments, remediation actions, and preparation for audits.

• Partner with engineering and technical teams to recognize and mitigate security threats.

• Convert compliance mandates into actionable technical controls and procedures.

• Promote ongoing enhancement of security posture and compliance initiatives.

• Confidently discuss NIST, CMMC, SOC 2, and FedRAMP, clarify the distinctions between these frameworks, and link compliance needs to technical measures.

⛳️ Requirements

• Minimum of 1 year of professional experience in security engineering, cybersecurity, compliance engineering, or a similar domain.

• Practical experience in web penetration testing or application security.

• Familiarity with AWS GovCloud or similar environments in GCP or Azure.

• Knowledge of NIST, CMMC, SOC 2, and FedRAMP security and compliance frameworks.

• Ability to communicate confidently and accurately about security measures, compliance mandates, and relevant frameworks.

• Strong analytical skills and problem-solving capabilities.

• Capacity to work independently in a remote setting while effectively collaborating with engineering teams.

• Experience with government, federal, or regulated clients is preferred.

• Active or previously held security clearance is preferred.

• Familiarity with cloud security, vulnerability management, or security automation is preferred.

• Knowledge of security documentation and audit/compliance procedures is preferred.

🏝️ Benefits

• Flexible remote work arrangement.

• Opportunity for growth within a highly technical environment.