Security Engineer (Need TX locals)

About the role

This position requires a deep focus on Governance, Risk, and Compliance (GRC), Enterprise Security, and Security Architecture. The ideal candidate will also have hands-on experience with CMS MARS E v2.2 or comparable federal/state security frameworks.

Responsibilities

• Owning SSP development from end to end
• Strong expertise in Control implementation documentation, Audit evidence collection and validation, POA&M creation, tracking, and remediation management
• Ability to translate technical security issues into compliance-aligned remediation actions
• Strong stakeholder management skills across security, infrastructure, and application teams
• Excellent written and verbal communication skills, particularly for executive stakeholders
• Knowledge of NIST 800 53, NIST RMF, and privacy controls
• Knowledge of Secure SDLC and DevSecOps practices

Requirements

• Required experience owning SSP development end to end
• Required hands-on experience with CMS MARS E v2.2 or comparable federal/state security frameworks
• Required strong expertise in Control implementation documentation, Audit evidence collection and validation, POA&M creation, tracking, and remediation management
• Required Strong stakeholder management skills across security, infrastructure, and application teams
• Required Excellent written and verbal communication skills, particularly for executive stakeholders
• Required Knowledge of NIST 800 53, NIST RMF, and privacy controls
• Required Knowledge of Secure SDLC and DevSecOps practices

Qualifications

• Preferred experience operating in multi-vendor, multi-platform environments
• Preferred Demonstrated ability to reduce repeat audit findings and improve compliance maturity
• Preferred Experience mentoring or guiding teams on security governance best practices

Skills

• Experience supporting HHSC systems, including SSP development and compliance