Security Engineer
$110,000–$145,000 year
RemoteUnited States
Job Summary
Partner with application development teams to integrate security requirements into design, development, and deployment workflows while supporting ATO efforts including System Security Plans and control documentation. Conduct risk assessments, vulnerability scans, and threat modeling aligned with NIST SP 800-53 and VA security standards, then participate in Agile/DevSecOps pipelines to ensure security is applied throughout the CI/CD lifecycle. Monitor and respond to security incidents, anomalies, and findings in coordination with stakeholders, and implement tools such as Splunk, ACAS, or Nessus to ensure compliance with FISMA, HIPAA, FedRAMP, and VA-specific requirements. This role supports the VA team in embedding security into software delivery for systems serving Veterans.
Required Qualifications
- Applicants must be authorized to work in the United States
- U.S. citizenship
- Ability to obtain and maintain a federal background investigation
- Ability to obtain and maintain a security clearance
- Bachelor's Degree
- Experience supporting ATO and RMF processes
- Experience supporting ATO and RMF processes including documentation
- Experience supporting ATO and RMF processes including continuous monitoring
- Solid understanding of NIST SP 800-53
- Solid understanding of FISMA
- Solid understanding of FedRAMP frameworks
- Experience securing cloud environments such as AWS GovCloud
- Experience securing cloud environments such as Azure Government
- Familiarity with vulnerability scanning tools such as Nessus
- Familiarity with vulnerability scanning tools such as ACAS
- Familiarity with SIEM platforms such as Splunk
- Familiarity with SIEM platforms such as ELK Stack
- Thrives in a remote, collaborative Agile environment
- Genuinely enjoys working closely with a cross-functional team
- Communicates clearly and openly
- Ability to write compliance documentation
- Ability to coordinate with engineering teams
Desired Qualifications
- Some scripting or automation experience in Python
- Some scripting or automation experience in Bash
- Some scripting or automation experience in PowerShell
- CISSP certification
- CAP certification
- CEH certification
- CISM certification
- DoD 8570 certification
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.