Security Engineer - Cloud & Government Infra

Air space Intelligence, Inc.; Boston; Sur place; PHP 7 538 000 - 11 935 000; Plein temps

Résumé du poste

Air Space Intelligence (ASI) is seeking a Security Engineer to harden and maintain cloud and software environments, with a focus on compliance with U.S. government security standards.

You will work across AWS GovCloud and Microsoft GCC High, lead threat modeling, and help secure government cloud deployments while collaborating with product, Platform, and compliance teams to embed security in the SDLC. Experience with CI/CD security, incident response, and vulnerability management is valued.

Qualifications

• Demonstrated coding skills in Python/Rust
• Investigate & remediate vulnerabilities
• Supply chain security experience (SBOM, artifact generation, dependency management)
• Lead threat modeling sessions (STRIDE/PASTA)
• Infrastructure as code (Terragrunt/Terraform)
• Federally compliant security frameworks (CMMC, NIST 800-53, FedRAMP)
• Experience securing government cloud environments (AWS GovCloud)
• Cloud-native alerting (GuardDuty, Security Hub, Azure Defender)
• Automate configuration management, patching, policy enforcement
• Monitor SIEM events (Microsoft Sentinel, Splunk)
• Embed security in SDLC with cross-team collaboration
• Assist incident response and post-incident reviews

Responsabilités

• Harden and maintain cloud and software environments
• Ensure compliance with U.S. government security standards
• Support AWS GovCloud and Microsoft GCC High
• Assist with NIST 800-171/800-53, CMMC and FedRAMP compliance
• Lead threat modeling sessions using STRIDE and PASTA
• Implement IaC with Terragrunt/Terraform
• Monitor and respond to security events via SIEMs
• Collaborate with product, Platform, and compliance teams to embed security in SDLC
• Support incident response and post-incident reviews

Connaissances

Python

Rust

Kubernetes

Image hardening

Vulnerability scanning

SBOM

Dependency management

Threat modeling

Terragrunt

Terraform

CMMC

NIST 800-53

FedRAMP

AWS GovCloud

GuardDuty

Security Hub

Azure Defender

SIEM

Incident response

Outils

Terraform

Terragrunt

Kubernetes

Splunk

Microsoft Sentinel

AWS GuardDuty

Security Hub

Description du poste

Air Space Intelligence (ASI) is seeking a Security Engineer to harden and maintain cloud and software environments, with a focus on compliance with U.S. government security standards.

You will work across AWS GovCloud and Microsoft GCC High, lead threat modeling, and help secure government cloud deployments while collaborating with product, Platform, and compliance teams to embed security in the SDLC. Experience with CI/CD security, incident response, and vulnerability management is valued.