Senior Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Create secure system architectures and cloud configurations that comply with federal and DoD security standards.

• Implement IL5 controls, security baselines, and hardening measures across systems, applications, and cloud resources.

• Enforce STIG requirements and secure configuration checklists on cloud, operating systems, networks, and application components.

• Assist with secure single sign-on integration, identity federation, certificate management, and authentication processes.

• Develop and uphold secure configuration baselines, encryption standards, and boundary protection measures.

• Perform security assessments, testing, and vulnerability analysis to identify and address risks.

• Evaluate code, configurations, and deployment strategies for secure implementation.

• Collaborate with cloud engineers, DevSecOps teams, and system owners on secure deployment methods and change controls.

• Engage in continuous monitoring activities, including log reviews, alert triage, scanning, and compliance updates.

• Offer technical advice for remediation and mitigation strategies.

• Assist in audit activities, authorization testing, and updates to security documentation.

• Produce architecture diagrams, security implementation plans, and technical design documents.

• Mentor junior engineers and contribute to the organization's security engineering standards.

⛳️ Requirements

• Must possess an active Top Secret clearance, validated by a Tier 5 background investigation.

• Bachelor's degree in Computer Science, Engineering, Cybersecurity, or a related discipline.

• At least 10 years of experience in security engineering, cybersecurity, or secure systems design.

• Experience in implementing IL5 or comparable high-impact cloud security controls.

• Proficient in applying STIGs, secure configuration baselines, and hardening guidelines.

• Experience in designing secure SSO, certificate management, and authentication integrations.

• Skilled in conducting security testing, vulnerability assessments, and planning for remediation.

• Experience in supporting secure cloud deployments and modern enterprise architectures.

• Strong understanding of cloud security architectures, especially in AWS.

• In-depth knowledge of DoD cybersecurity requirements, NIST SP 800-53, and RMF-aligned controls.

• Proficient in STIG application, hardening techniques, and secure configuration standards.

• Familiarity with identity and access management, certificate management, and PKI.

• Experience with SIEM tools, log analysis, scanning tools, and continuous monitoring programs.

• Experience with AWS cloud-native security services and AWS security certifications is preferred.

• Familiarity with Zero Trust architectures and modern boundary protection strategies is preferred.

• Experience with container security, Kubernetes hardening, or cloud-native application security is preferred.

• Understanding of DevSecOps pipelines, Infrastructure as Code (IaC) scanning, and security automation tools is preferred.

• Required certification: CISSP, CCSP, or Security+.

• Strong problem-solving abilities and technical analysis skills.

• Excellent communication skills for conveying technical concepts to stakeholders.

• Capable of designing and documenting secure architectures, baselines, and implementation plans.

• Strong attention to detail and precision in applying security controls and reviewing configurations.

• Ability to balance mission requirements with stringent cybersecurity needs.

🏝️ Benefits

• Regular full-time employment.

• Equal employment opportunity and affirmative action protections.

• Authorization to share resume and personal information with subsidiaries, affiliates, and teaming partners for consideration for this and similar positions.