Security Engineer

📋 Description

• Deploy and automate CI/CD pipelines and establish IaC using modern DevSecOps techniques including
• Own the POAM process end to end — develop a plan of attack with target dates, track progress in
• Assess incoming security findings, identify duplicates and dependencies, and develop LOEs for
• Conduct Security Impact Analyses (SIAs) to achieve and maintain ATO
• Implement data tagging and sensitivity management practices to reduce the SEC's ATO management
• Engage directly with engineers and external stakeholders to drive remediation forward

🎯 Requirements

• Hands-on experience remediating POAMs and navigating the federal ATO process
• Proficiency with AWS environments and cloud security practices
• Experience with CI/CD pipelines, CloudFormation, and infrastructure as code
• Familiarity with Zero Trust principles and federal cybersecurity frameworks including FISMA and
• Strong organizational skills with the ability to manage multiple findings, timelines, and
• Comfortable engaging directly with engineers and external stakeholders to move remediation forward

🎁 Benefits

• Fully remote
• Annual stipend
• Comprehensive Benefits Package
• Company Match 401(k) plan
• Flexible PTO, Paid Holidays