Security Engineer

This is a fully remote position, open to applicants in District of Columbia, +1 more state.

📋 Description

• Strategize, execute, upgrade, and oversee security measures that protect the agency's networks, systems, and information.

• Ensure that suitable security controls are in place to protect digital files and essential electronic infrastructure.

• Design and create security solutions for intricate engineering, system administration, and network challenges.

• Conduct systems management and integration tasks, mainly within cloud environments.

• Assist in the integration and development of automated and AI-driven solutions in complex cloud settings.

• Aid in the design of interfaces, quality assurance, and performance benchmarks.

• Carry out cost-benefit analyses of contemporary information systems.

• Evaluate existing technologies and provide recommendations on what to adopt and how to implement them effectively.

• Support the delivery of security engineering aligned with the agency's cybersecurity architecture and engineering initiatives.

• Maintain, research, enhance, and develop the agency's cybersecurity environment and toolsets.

• Contribute to a resilient architecture that incorporates Zero Trust principles, including secure deployment, validation, and ongoing monitoring of security controls.

• Assist with Security Impact Assessments and uphold interconnection and data exchange security agreements for secure cloud service integration.

⛳️ Requirements

• A Bachelor's degree in a technical or cybersecurity-related discipline.

• 2 to 3 years of professional experience in cybersecurity, with a solid understanding of security engineering functions and capabilities.

• Proven experience in implementing, upgrading, or monitoring security controls and tools.

• Practical experience in systems management and integration within cloud environments (AWS, Azure, or GCP).

• Background in designing or developing security solutions for complex system administration or network issues.

• U.S. Citizenship or Permanent Residency, with all work conducted within the continental U.S.

• Capability to pass a federal agency suitability or background check.

• Previous experience in federal contracting, particularly in support of a civilian agency's cybersecurity program.

• Experience in supporting or developing automation, low-code/no-code, or AI-enabled security solutions.

• Knowledge of Zero Trust architecture concepts and reference models.

• Familiarity with NIST SP 800-37 and NIST SP 800-53 control implementation from an engineering viewpoint.

• Experience with FedRAMP-authorized cloud services and the security agreements governing their integration.

• Relevant certifications such as Security+, CySA+, AWS Certified Security, Azure Security Engineer Associate, or GIAC equivalents.

• Strong written and verbal communication skills for both technical and non-technical audiences.

• Ability to work independently as well as collaboratively as part of a distributed team.

• Comfort with operating in a fully remote environment characterized by a camera-on meeting culture.

• Good judgment regarding decision-making and escalation processes.

• A collaborative approach with system owners, business owners, developers, and assessors.

• Commitment to high documentation quality and follow-through on responsibilities.

🏝️ Benefits

• Medical: Various POS health plan options, including an HSA-compatible plan.

• Dental: PPO coverage for preventive, basic, and major services.

• Vision: Annual exam, frames, lenses, and contact lens allowance.

• 401(k): Employer match up to 5% of eligible compensation.

• Long-Term Disability: 100% employer-paid coverage at 50% of pre-disability earnings.

• Life Insurance & AD&D: 100% employer-paid coverage valued at $10,000 each.

• PTO: 15–25 days annually based on tenure, plus 16 hours of Floating PTO from day one.

• Paid Federal Holidays: All 11 federal holidays are observed.