Security Engineer - Remote

Overview In this Security Engineer role, you will help ensure environments and applications meet Federal Security Standards while delivering secure engineering solutions for client systems. You will work across multiple products, advising technical teams and leadership on risk, standards, and best practices to maintain security quality and customer satisfaction. You will identify vulnerabilities, guide remediation with developers, and shepherd secure production deployment. This is a consulting position with exposure to federal security frameworks and incident response, offering impact across projects and environments. ResponsibilitiesPerform Static Application Security Testing (SAST) to identify vulnerabilities in code and infrastructurePerform Dynamic Application Security Testing (DAST)Create and update threat models for FISMA systemsAssist and lead security incident responseAssist with documentation of System Security Plan and Contingency PlansEnsure security systems are up to date and plan security documentation including incident response and disaster recoveryReview policies for compliance and identify remediation opportunitiesInteract with senior management including the ISSOUse security assessment tools such as Nessus, Snyk, AWS GuardDuty and AWS InspectorApply cryptography expertise to secure web apps and data at restCollaborate with development teams to review and fix codeWork with DevOps to securely harden Linux and cloud infrastructure Key requirementsBachelor’s Degree5+ years of professional security engineering experienceReside in the U.S. and eligible to work in the U.S.Must be able to obtain and maintain a Public TrustThree years of U.S. residence in the last five yearsGood leadership and teamworkAnalytical, problem-solving and decision-makingExcellent communication and interpersonal skillsNIST 800-53 security controlsSystem hardening and DoD STIGsIncidence response leadership