Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Deploy and automate CI/CD pipelines while establishing Infrastructure as Code (IaC) using contemporary DevSecOps methodologies, including serverless and Zero Trust models.

• Take ownership of the POAM process from start to finish: create plans with target deadlines, monitor progress in real time, and proactively address findings.

• Evaluate incoming security findings, identify any duplicates and dependencies, and develop Levels of Effort (LOEs) for remediation.

• Conduct Security Impact Analyses (SIAs) to secure and uphold Authorization to Operate (ATO).

• Implement data tagging and sensitivity management practices to alleviate the SEC's ATO management workload.

• Collaborate directly with engineers and external stakeholders to advance remediation efforts.

• Maintain an up-to-date dashboard and tracker for all security findings and the status of the POAM.

• Perform additional related tasks as assigned.

⛳️ Requirements

• Practical experience in remediating POAMs and navigating the federal ATO process.

• Expertise in AWS environments and cloud security protocols.

• Familiarity with CI/CD pipelines, CloudFormation, and Infrastructure as Code.

• Understanding of Zero Trust principles and federal cybersecurity frameworks, including FISMA and NIST 800-53.

• Excellent organizational abilities to manage multiple findings, timelines, and stakeholders simultaneously.

• Comfortable engaging directly with engineers and external partners to facilitate remediation.

• Experience with Docker and containerized environments is advantageous.

• Thrives in a remote, collaborative Agile setting and enjoys working closely with a cross-functional team.

• Communicates effectively and transparently, whether updating a tracker or presenting findings to leadership.

• Must have authorization to work in the United States.

• Certain positions may necessitate U.S. citizenship and the capability to obtain and maintain a federal background investigation and/or security clearance.

• Bachelor’s degree is required.

🏝️ Benefits

• Fully remote work environment.

• Annual stipend.

• Comprehensive benefits package.

• Company-matched 401(k) plan.

• Flexible Paid Time Off (PTO).

• Paid holidays.