Senior Security Engineer

As a Security Engineer on our solutions delivery team, you will have the unique opportunity to work on innovative projects advancing the digital transformation of critical government systems with true mission impact. 

Our delivery teams are driven to explore new ideas and technology, and care deeply about collaboration, feedback, and iteration. We follow lean agile practices, embrace the Ops (DataOps/DevSecOps/MLOps) to “automate-first”, use modern tech stacks, and constantly challenge each other to grow and improve.  

Technical members of our solutions teams require little guidance, but love to learn, collaborate, and problem solve. This position requires expert experience and passion for supporting the building of secure cloud and cyber security solutions, and a strong desire to solve our customers’ unique technical and data challenges.  

Primary Responsibilities: 

• Bridging the gap between complex business problems and secure solutions 
• Ensuring that solutions adhere to customer security guidelines, requirements, and industry best practices 
• Maintaining security posture of customer compute and cloud environments 
• Leads certification and accreditation support in the development of security and contingency plans and conducts complex risk and vulnerability assessments
• Analyzes policies and procedures against Federal laws and regulations and provides recommendations for closing gaps
• Develops and completes system security plans and contingency plans
• Recommends system enhancements to improve security deficiencies 
• Conducts security program audits and develops solutions to lessen identified risks
• Provides information assurance support for the development and implementation of security architectures to meet new and evolving security requirements 

 Basic Qualifications: 

• Clearance: TOP SECRET WITH POLYGRAPH 
• 12+ years of experience maintaining security posture of standard compute environments, including cloud (AWS) environments 
• Experience managing the full lifecycle of, and workflows for, security accreditation projects under the ICD503 Rev. 4 framework
• Extensive knowledge of information system security system plans (SSP) and other security relevant documentation for computer systems and applications
• Extensive knowledge in cybersecurity best practices and security risk assessment technologies
• Experience routinely using knowledge management and code repositories, including but not limited to, GitHub, Gitlab, Jira, and Confluence 

 Preferred Qualifications: 

• Demonstrated ability to effectively engage with Sponsor Information System Security Managers (ISSMs) to ensure security compliance of systems 
• Experience obtaining IC reciprocity for at least one security accreditation project 

Clearance: TOP SECRET WITH  POLYGRAPH 

Location:  

• Reston, VA with some remote flexibility

Physical Requirements 

• Prolonged periods sitting at a desk and working on a computer 
• Must be able to lift 10-15 pounds at times 

 #CJ