Security Engineer
Summary
Build and maintain a FedRAMP-compliant AWS GovCloud environment for a legal-intelligence startup expanding into federal work, focusing on security controls, automation, and compliance evidence.
The role
Vulcan sells legal intelligence to state agencies and is moving into federal work. FedRAMP is the federal government's security standard for cloud services; we run an environment that already implements most of the required controls and are working toward full certification.
You build and operate that environment. The authorization boundary runs in AWS GovCloud (US), and you own the engineering that keeps it secure, reproducible, and continuously in compliance: identity and access, key management, network segmentation, logging and detection, vulnerability management, CI/CD, and the automated evidence collection that proves all of it.
What we're looking for
- Experience with AWS
- At least 1 year of professional experience
- Competence with agentic coding
Nice to have
- Startup experience
- Experience working on FedRAMP-compliant products
- Security engineering experience
How we work
We work 996: 9am to 9pm, six days a week, in the Austin office. There is no remote option and no hybrid schedule.
We are a small company attempting a federal certification on a timeline most companies take three years to reach, while continuing to ship product and onboard state customers.