Security Engineer

Air space Intelligence, Inc.; Boston; On-site; PHP 7,538,000 - 11,935,000; Full time

Job summary

Air Space Intelligence (ASI) is seeking a Security Engineer to harden and maintain cloud and software environments, with a focus on compliance with U.S. government security standards.

You will work across AWS GovCloud and Microsoft GCC High, lead threat modeling, and help secure government cloud deployments while collaborating with product, Platform, and compliance teams to embed security in the SDLC. Experience with CI/CD security, incident response, and vulnerability management is valued.

Qualifications

• Demonstrated coding skills in Python/Rust
• Investigate & remediate vulnerabilities
• Supply chain security experience (SBOM, artifact generation, dependency management)
• Lead threat modeling sessions (STRIDE/PASTA)
• Infrastructure as code (Terragrunt/Terraform)
• Federally compliant security frameworks (CMMC, NIST 800-53, FedRAMP)
• Experience securing government cloud environments (AWS GovCloud)
• Cloud-native alerting (GuardDuty, Security Hub, Azure Defender)
• Automate configuration management, patching, policy enforcement
• Monitor SIEM events (Microsoft Sentinel, Splunk)
• Embed security in SDLC with cross-team collaboration
• Assist incident response and post-incident reviews

Responsibilities

• Harden and maintain cloud and software environments
• Ensure compliance with U.S. government security standards
• Support AWS GovCloud and Microsoft GCC High
• Assist with NIST 800-171/800-53, CMMC and FedRAMP compliance
• Lead threat modeling sessions using STRIDE and PASTA
• Implement IaC with Terragrunt/Terraform
• Monitor and respond to security events via SIEMs
• Collaborate with product, Platform, and compliance teams to embed security in SDLC
• Support incident response and post-incident reviews

Skills

Python

Rust

Kubernetes

Image hardening

Vulnerability scanning

SBOM

Dependency management

Threat modeling

Terragrunt

Terraform

CMMC

NIST 800-53

FedRAMP

AWS GovCloud

GuardDuty

Security Hub

Azure Defender

SIEM

Incident response

Tools

Terraform

Terragrunt

Kubernetes

Splunk

Microsoft Sentinel

AWS GuardDuty

Security Hub

Job description

Open — Air Space Intelligence has a posting for this job. Posted 26 Aug 2026.

This posting

Opens jobs.ashbyhq.com. Talentify has not checked who owns that address. You apply there — Talentify never asks for an account or a CV.

Get jobs like this by email

Talentify emails you Security Engineer jobs in Boston.

Job alerts

Get jobs like this by email

Talentify emails you Security Engineer jobs in Boston.

Email address Leave this empty

Job alerts by email only. We send a link to confirm first, and nothing else arrives until you click it. Every email has a one-click unsubscribe. Privacy policy .

About this job

About ASI

ASI's mission-critical technology powers decision-making across aviation, defense, energy, and other critical infrastructure domains. Backed by top-tier investors including Andreessen Horowitz, Spark Capital, and Renegade Partners, ASI delivers operational decision superiority—compressing days of analysis into seconds of action. ASI is leading the way and pushing the boundaries of what’s possible.

What You Will Do

Air Space Intelligence is building mission-critical, secure infrastructure for defense and intelligence applications. We are seeking a Security Engineer to harden and maintain cloud and software environments, ensuring compliance with U.S. government security standards. As a Security Engineer, you will help harden and maintain ASI’s cloud and endpoint environment (AWS GovCloud and Microsoft GCC High) while supporting compliance with U.S. government security standards (e.g., NIST 800-171/CMMC and NIST 800-53).

What We Value

• Demonstrated coding skills in Python/Rust
• Knowledge of container and CI/CD security (Kubernetes, image hardening, vulnerability scanning)
• Investigate & remediate vulnerabilities, escalating complex issues when needed
• Supply chain security experience (SBOM, artifact generation, dependency management)
• Lead threat modeling sessions using established industry methodologies (e.g., STRIDE, PASTA, etc.)
• Demonstrated skills in Infrastructure as a code (Terragrunt/Terraform).
• Practical exposure to federal security frameworks (CMMC, NIST 800-53, FedRAMP).
• Experience securing government cloud environments (AWS GovCloud), ensuring compliance with federal security requirements.
• Hands-on experience with cloud-native incident alerting services (e.g., AWS GuardDuty/Security Hub, Azure Defender, etc.)
• Automate configuration management, patching, and policy enforcement for networks, servers, and endpoints
• Monitor security events using SIEM tools (Microsoft Sentinel, Splunk)
• Collaborate with product, Platform, and compliance teams to embed security in the SDLC
• Support incident response and post-incident review, growing toward leading these efforts over time

How we hire:

We view the interview process not as a screening or test, but rather as an opportunity to simulate what it would be like working together. We build the interview process around you.

ADDITIONAL REQUIREMENTS

• Security Clearance: Must be eligible to obtain DoD clearance.
• Citizenship: U.S. citizenship is required for this position.
• On-Site Presence: Ability to work in our Boston (BOS) office at least three days per week

Opens jobs.ashbyhq.com, after a short hand-off page here.

One page per job at this company, in this place. Open or closed, it says which.

Open: the posting you see is the one you apply to, on the employer's site. No account here.

Closed: the page stays, keeps this job's history, and turns back to Open when the employer posts it again.

State comes from Talentify's job index. Closures are checked every hour and every page is re-read at least daily, so a change on the employer's side can take a day or more to show here.