Security Engineer

Description

The company is a small group building technology and creative work for government clients, and it is hiring a security engineer to protect AI, data analytics and enterprise systems for a national security customer.

The role is hands-on: you design, build, test and run security controls that guard sensitive investigative data while letting the team deliver AI and analytics tools safely.

You will work across applications, data platforms, cloud infrastructure and DevSecOps pipelines, covering access control, encryption, monitoring, logging, vulnerability management, secure application design and continuous compliance in Azure Government and other regulated federal environments.

You will also support Authority to Operate (ATO) work, incident response, forensic analysis and security documentation.

Strong compliance knowledge alone is not enough. The company wants an engineer who is technically strong, takes ownership, spots risk early, communicates clearly with federal customers and technical teams, and pushes security issues through to resolution.

Responsibilities

• Design, build and maintain security controls across AI platforms, enterprise data, cloud infrastructure and mission applications, including logging, access control, audit trails, encryption and least-privilege policies.
• Implement and enforce role-based access control (RBAC), data security policies and safeguards for sensitive data, including Sensitive Personally Identifiable Information (SPII), Law Enforcement Sensitive (LES) and For Official Use Only (FOUO) information, in line with customer and DHS requirements.
• Connect applications, data platforms and cloud infrastructure to approved Security Information and Event Management (SIEM) platforms and log aggregation tools for monitoring, alerting, investigation and incident response.
• Review security logs, access patterns and user behaviour to catch unauthorised access, unusual activity, data exfiltration risk and other potential incidents across application, data and infrastructure layers.
• Support ATO and continuous monitoring: implement controls, write control documentation, coordinate security testing, assess vulnerabilities, track remediation, prepare evidence and keep compliance current against NIST SP 800-53, FedRAMP, FISMA and customer requirements.
• Carry out or coordinate vulnerability assessments, penetration tests, secure code reviews and configuration assessments, and confirm pilot and production systems meet the security requirements that apply.
• Implement and verify application security controls, including input validation, output encoding, authentication, authorization, session management, secure API design and defences against the OWASP Top 10.
• Support forensic analysis and incident response, including rebuilding servers or virtual machines, analysing security data, preserving digital evidence and writing technical reports or declarations for investigations or administrative matters.
• Work with cybersecurity teams, privacy officers, cloud and platform engineers, DevSecOps teams, developers and Authorizing Officials to keep a joined-up security posture that follows enterprise policy and continuous monitoring programmes.
• Write and maintain clear security documentation, such as architecture diagrams, control evidence, configuration standards, incident response procedures, operating procedures and knowledge-transfer material.
• Raise risks, dependencies, technical blockers and recommended fixes early with customers, teammates and leadership.
• Contribute to knowledge sharing, learning, innovation work, onboarding and other internal efforts that help the wider team.

Requirements

• You are a U.S. citizen.
• You currently live in the United States.
• You live in the Eastern or Central Time Zone.
• You can obtain and keep DHS Public Trust / EOD suitability.
• You hold a bachelor's degree and have at least 7 years of experience in cybersecurity, information security, security engineering or a related field.
• You have hands-on experience implementing security controls, identity and access management, encryption and logging or monitoring for enterprise applications and cloud infrastructure.
• You understand federal security requirements, including NIST SP 800-53, FedRAMP and FISMA, and have supported ATO and continuous monitoring.
• You have hands-on cloud security experience in Azure, AWS or GCP, covering identity and access management, network security, encryption and key management, and security monitoring. Azure and Entra ID experience is strongly preferred.
• You have worked with SIEM platforms, security log analysis, monitoring, intrusion detection, incident investigation and incident response.
• You understand secure application engineering, including authentication, authorization, API security, vulnerability management and common web application risks.
• You analyse problems well, use sound technical judgement and can investigate complex security issues across several technology layers.
• You communicate well in writing, verbally and interpersonally.
• You work independently, manage your own load, spot issues before they block work and drive problems to resolution with limited oversight.
• You pay close attention to detail and produce accurate, high-quality technical work and documentation.
• Preferred: You have experience securing AI/ML applications, generative AI systems, data analytics platforms or sensitive data environments.
• Preferred: You have supported federal government, law enforcement, homeland security, intelligence or other national security missions, including handling investigative data.
• Preferred: You have hands-on work with Azure Government or AWS GovCloud, or with security controls in FedRAMP High, DoD Impact Level or similar regulated environments.
• Preferred: You have used Microsoft security tooling such as Microsoft Sentinel, Defender for Cloud, Azure Monitor, Entra ID, Key Vault, Azure Policy or equivalent cloud security services.
• Preferred: You have worked in DevSecOps environments with CI/CD, infrastructure as code, automated security scanning, configuration management and continuous compliance.
• Preferred: You have experience with Zero Trust architecture and identity-centric security patterns.
• Preferred: You hold professional security certifications such as CISSP, CEH, GIAC (GSEC, GCIH, GCIA), Security+ or equivalent.
• The company expects you to care about solving hard technical problems that support U.S. national security.
• You take ownership, start and improve work without waiting to be told, and manage up.
• You communicate early and often, flag risks, and keep customers and teammates informed.
• You build trusted working relationships with federal customers, partners and teammates.
• You keep learning and are willing to work outside your existing expertise.
• You share knowledge, take part in internal initiatives, onboarding and business development support, and put the team first.
• You are professional, humble, empathetic toward customers, accountable and collaborative.
• You keep written communication, technical documentation and customer deliverables consistently precise.
• Technologies and frameworks: Azure Government; Microsoft Entra ID (Azure AD); Microsoft Sentinel or other SIEM platforms; Defender for Cloud; Azure Monitor; Key Vault; Azure Policy; NIST SP 800-53; FedRAMP; FISMA; ATO and continuous monitoring; RBAC and IAM; encryption and key management; OWASP Top 10; vulnerability management; secure APIs; DevSecOps; CI/CD; Git-based workflows; Docker and Kubernetes; Terraform or other infrastructure-as-code tools.

Conditions

Pay depends on experience and qualifications. The company is glad to discuss pay expectations early in the process.

Equal opportunity applies; the company does not discriminate on protected grounds.

Benefits

• Medical, dental and vision coverage.
• 401(k) matching.
• Paid time off.
• Employee shares programme.