Security Engineer GRC Federal Frameworks

You will implement and audit security compliance controls, lead authorization and assessment activities, manage continuous monitoring, and develop risk mitigation plans. You will partner with technical stakeholders to validate controls, assess emerging risks, and report compliance status to leadership.

Responsibilities

• Execute security compliance implementation and audits
• Oversee audits, certifications, assessments, and vulnerability management
• Design and implement risk mitigation strategies, monitoring systems, contingency plans, POAMs, and STIGs
• Maintain security configurations, practices, and procedures
• Lead risk management assessment and authorization processes and cloud risk assessments
• Conduct risk assessments and evaluate emerging threats and requirements
• Provide cybersecurity, risk, and compliance guidance
• Present GRC performance, risk, and compliance reports to leadership

Requirements

• Bachelor's degree in computer science, information security, cybersecurity, engineering, or STEM
• 3+ years of experience in governance, risk management, compliance, or technology audit
• At least 1 year of experience with FedRAMP or IL5 compliance, vulnerability management, and continuous monitoring
• Experience implementing security compliance frameworks and cloud security controls
• Expert knowledge of DoD Cloud Computing SRG IL5/IL6, FedRAMP Class D, or NIST 800-171/CMMC
• Must meet ITAR eligibility requirements or be eligible to obtain required authorization

Benefits

• Equity
• Medical coverage
• Vision coverage
• Dental coverage
• 401(k) retirement plan
• Short-term disability insurance
• Long-term disability insurance
• Life insurance
• Discounts and perks