Lead Security Engineer

Job Summary

Leading application security efforts in a full-time capacity, the Lead Security Engineer will provide technical and management leadership on a cloud-native federal modernization program, implementing DevSecOps methodologies and Zero Trust principles while interfacing with senior stakeholders.

Key responsibilities

• Lead the design and implementation of application security solutions throughout the System Development Life Cycle (SDLC)
• Direct vulnerability assessments, penetration testing, and threat modeling to identify and remediate security weaknesses
• Support the Authorization to Operate (ATO) process, including security control assessments and management of security artifacts

Required qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field
• 15+ years of relevant IT/cybersecurity experience with a focus on technical and management leadership
• Certified Information Systems Security Professional (CISSP) and Certified Cloud Security Professional (CCSP)
• Expertise in integrating security into a DevSecOps SDLC and implementing Zero Trust Architecture
• Experience managing the ATO lifecycle and security artifact collection