Security Engineer

Job Summary

Serving as the security lead for a FIPS 199 Moderate federal platform, the full-time Security Engineer will manage vulnerability assessments, compliance documentation, and secure development practices while working remotely from anywhere in the United States.

Key responsibilities

• Run automated vulnerability scans and lead remediation efforts across various platforms, ensuring compliance with security benchmarks
• Maintain and update the system's assessment and authorization (A&A) package, supporting government-led security assessments and control reviews
• Embed security practices in the development lifecycle, including threat modeling and security testing in CI/CD pipelines

Required qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field
• At least 5 years of hands-on information security experience, specifically with federal information systems under FISMA
• Experience with the NIST Risk Management Framework and implementing NIST SP 800-53 Rev. 5 controls
• Proficiency in running vulnerability scanning tools and driving remediation across various system layers
• Working knowledge of application security practices, including OWASP Top 10 and securing CI/CD pipelines