Senior Security Engineer

About the role

The Senior Security Engineer is responsible for maintaining the security posture and authorization of the system. You will manage the Risk Management Framework (RMF) lifecycle, maintain ATO documentation and continuous-monitoring artifacts, and ensure the system remains compliant with NIST 800-53 and federal security requirements.

Responsibilities

• Maintain the system's Risk Management Framework (RMF) documentation and ATO package
• Manage security control implementation evidence against NIST 800-53 / FedRAMP
• Track and remediate findings via POA&Ms and coordinate continuous monitoring
• Support security assessments, audits, and authorization activities
• Coordinate with the client ISSM, security teams, and DevSecOps on compliance
• Review changes for security impact and maintain security baselines
• Report security posture, risks, and incidents to program and client stakeholders

Requirements

Non-Technical Requirements

• Must be a U.S. Citizen
• Must be willing to work a hybrid schedule (2 days) in Reston, VA & client locations in the Washington D.C. area as required
• Ability to pass a 7-year background check and obtain/maintain a U.S. Government Clearance
• Strong communication and presentation skills
• Must be able to prioritize and self-start
• Must be adaptable/flexible as priorities shift
• Must be enthusiastic and have passion for learning and constant improvement
• Must be open to collaboration, feedback and client asks
• Must enjoy working with a vibrant team of outgoing personalities

Required Qualifications

• CISSP, CAP, or equivalent security certification
• 5+ years of information system security / Security Engineering experience
• Strong knowledge of RMF, NIST 800-53, and federal ATO processes
• Experience with continuous monitoring and POA&M management

Preferred Qualifications

• FedRAMP and cloud (AWS) security experience
• Financial-regulatory security experience
• Experience with security automation and GRC tooling