OverviewDecisionPointseeks a Senior Security Engineer to design and implement secure architectures, hardening baselines, and cybersecurity controls for enterprise cloud-hosted platforms supporting a federal and DoD-aligned mission environment. This senior technical role provides advanced security engineering, IL5-compliant control implementation, secure identity and access integration, STIG alignment, and vulnerability reduction across complex systems.
The Senior Security Engineer supports system modernization, secure cloud adoption, continuous monitoring improvements, and enterprise cybersecurity strategy through engineering rigor, security testing, and expert technical guidance. This role ensures system confidentiality, integrity, and availability through proactive design and implementation of robust security controls and architectures.
This position is fully remote.
Duties & Responsibilities
The Senior Security Engineer will:
- Design secure system architectures and cloud configurations in alignment with federal and DoD security requirements.
- Implement IL5 controls, security baselines, and environment hardening across systems, applications, and cloud resources.
- Apply STIG requirements and secure configuration checklists to cloud, OS, network, and application components.
- Support secure single sign-on (SSO) integration, identity federation, certificate management, and authentication workflows.
- Develop andmaintainsecure configuration baselines, encryption standards, and boundary protection controls.
- Conduct security assessments, security testing, and vulnerability analysis toidentifyand remediate risks.
- Review code, configurations, and deployment patterns for secure implementation.
- Collaborate with cloud engineers,DevSecOpsteams, and system owners to ensure secure deployment practices and change controls.
- Participate in continuous monitoring activities including log review, alert triage, scanning, and compliance updates.
- Provide detailed technical recommendations for remediation and mitigation strategies.
- Support audit activities, authorization testing, and security documentation updates.
- Produce architecture diagrams, security implementation plans, and technical design documentation.
- Mentor junior engineers and contribute to organizational security engineering standards.
Qualifications
Clearance Requirement
Must hold an active Top Secret clearance, supported by a Tier 5 background investigation.
Education (Required)
Bachelor27s degree in Computer Science, Engineering, Cybersecurity, ora relatedfield.
Experience (Required)
- Minimum10 yearsof experience in security engineering, cybersecurity, or secure systems design.
- Experience implementing IL5 or equivalent high-impact cloud security controls.
- Experience applying STIGs, secure configuration baselines, and hardening guidelines.
- Experience designing secure SSO, certificate management, and authentication integrations.
- Experience performing security testing, vulnerability assessments, and remediation planning.
- Experience supporting secure cloud deployments and modern enterprise architectures.
Technical Knowledge (Required)
- Strong knowledge of cloud security architectures, particularly in AWS.
- Deep understanding of DoD cybersecurity requirements, NIST SP 800-53, and RMF-aligned controls.
- Proficiencyin STIGapplication, hardening techniques, and secure configuration standards.
- Knowledge of identity and access management, certificate management, and PKI.
- Experience with SIEM tools, log analysis, scanning tools, and continuous monitoring programs.
Technical Knowledge (Preferred)
- Experience with AWS cloud-native security services and AWS security certifications.
- Familiarity with Zero Trust architectures and modern boundary protection strategies.
- Experience with container security, Kubernetes hardening, or cloud-native app security.
- Understanding ofDevSecOpspipelines,IaCscanning, and security automation tools.
Certifications
Required:
Preferred:
- GIAC security engineering or cloud certifications
Skills
- Strong problem-solving and technical analysis skills for diagnosing complex security issues.
- Excellent communication skills for conveying technical concepts to stakeholders.
- Ability to design and document secure architectures, baselines, and implementation plans.
- Strong attention to detail and precision in applying security controls and reviewing configurations.
- Ability to balance mission needs with rigorous cybersecurity requirements.
