Security Engineer / ISSE

About the role

Senior Security Engineer / ISSE

Role Overview

We are seeking an experienced Security Engineer to join our dynamic team. In this role, you will play a crucial part in ensuring the security of cloud infrastructure, software, and AI systems. You will work closely with engineers across various disciplines to implement and maintain robust security measures, while also ensuring compliance with relevant government regulations and accreditation standards. You will support the ISSM by providing or assisting with artifacts for compliance such as topology diagrams or descriptions of how security is implemented.

Desired Qualifications

- Compliance Expertise: Knowledge of government compliance frameworks and accreditation processes, such as FedRAMP, DISA Impact Level 5, NIST 800-53

- Experience with the DISA Cloud Security Requirements Guide (SRG)

- Experience working with Department of War (DoW) security stacks including VDMS, VDSS, BCAP, and other related security frameworks, tool, and common practices

- Knowledge of security technologies such as firewalls, intrusion detection systems, and security information and event management (SIEM) tools

- Experience documenting system security posture and adherence to security controls, including creating and maintaining security plans, risk assessments, and incident reports

- Familiarity with secure coding practices, vulnerability assessments, and vulnerability remediation

- Strong understanding of cloud security best practices

- Must be a U.S. Citizen and eligible to obtain a Top Secret clearance

What we are looking for in a strong candidate

- Strong understanding of software security and AI system security

- Hands-on experience with security tools and technologies for cloud environments (e.g., Google Security Command Center, AWS Security Hub, Azure Security Center, Tenable Products)

- Knowledge of specific AI/ML security assessment frameworks

- Bonus points for relevant security certifications (e.g., CISSP, CCSP, Professional Cloud Security Engineer)

- Experience with security automation and DevSecOps practices and Infrastructure as Code (IaC)

Key Responsibilities

- Cloud Security: Document and manage security architectures for cloud environments (e.g., Google Cloud, AWS, Azure). This includes securing cloud resources, managing access control, assessing network security, and ensuring data protection.

- Software Security: Integrate security practices throughout the software development lifecycle (SDLC). This involves integrating security into software processes such as code reviews, vulnerability assessments, and promoting secure coding practices.

- AI System Security: Assess and mitigate security risks specific to AI systems.

- Compliance and Accreditation: Ensure that systems and processes meet relevant government security standards and regulations (e.g., NIST 800-53, DISA Impact Levels). This includes conducting security audits, preparing documentation, and participating in accreditation activities.