Lead Security Engineer

We are seeking an experienced Lead Security Engineer to design implement and lead cybersecurity engineering for a secure on-premises Federal data analytics and AI platform supporting sensitive grants and awards information within a Government-approved security boundary.

This role will serve as a technical security lead across the platform architecture infrastructure applications data APIs DevSecOps pipelines and AI services. The Lead Security Engineer will translate Federal security requirements into practical technical controls and engineering patterns while ensuring those controls are implemented tested monitored and supported with the evidence necessary for Risk Management Framework (RMF) activities and ongoing authorization.

• 8 years of experience in cybersecurity engineering security architecture information assurance or a related field.
• Demonstrated experience designing and implementing security controls for Federal information systems preferably in FISMA/RMF environments.
• Strong knowledge of FISMA NIST SP 800-53 Rev. 5 RMF and secure software development/DevSecOps.
• Experience securing enterprise infrastructure applications databases APIs networks and on-premises or hybrid platforms.
• Hands-on experience with Linux Docker/containerization and Kubernetes and/or Rancher.
• Experience implementing IAM RBAC privileged access authentication authorization encryption certificates secrets and key-management controls.
• Experience with vulnerability management security scanning patching configuration management and remediation.
• Experience integrating security into CI/CD pipelines preferably with Jenkins and/or self-hosted Azure DevOps.
• Understanding of application security including SAST/SCA/DAST dependency management container security secrets detection and secure API design.
• Experience with security logging monitoring alerting audit trails and incident response.
• Experience supporting security assessments audits POA&Ms vulnerability assessments and continuous monitoring.
• Ability to conduct threat modeling and evaluate security risks associated with new technologies and architectures.
• Strong technical documentation communication and problem-solving skills.
• Ability to collaborate across platform infrastructure application data AI/ML DevOps and Government teams.
• U.S. citizenship and ability to obtain and maintain Top Secret eligibility as required for contractor personnel supporting the effort. Active Top Secret clearance highly preferred.

• Experience supporting Federal financial management budget execution grants management payment systems award oversight financial reporting or financial stewardship.
• Experience securing Federal grants payment financial or award-oversight platforms.
• Experience securing AI/ML or open-source LLM workloads in on-premises restricted or disconnected environments.
• Experience with SIEM SOAR EDR security automation infrastructure-as-code security or related technologies.
• Familiarity with FedRAMP-authorized environments FISMA Moderate NIST SP 800-53 Section 508 and Federal records/privacy requirements.
• Relevant security certifications such as CISSP Security SecurityX/CASP CCSP CISM or GIAC.