Security Engineer with IRS MBI Clearance

3M Consultancy; Poland; On-site; PLN 210,792 - 295,109; Full time

Job summary

A leading consultancy firm based in Poland is seeking an experienced Security Engineer specializing in NIST 800-53 security controls and vulnerability management. The ideal candidate will have over 8 years of IT experience and at least 5 years in security solutions, responsible for developing security plans and assessing compliance. This role demands proven knowledge of federal cybersecurity frameworks and security technologies. A competitive compensation package is offered, along with opportunities for professional development.

Qualifications

• 8+ years of experience in IT with increasing responsibilities.
• 5+ years of experience in Information Security.
• Deep understanding of federal security standards like FISMA, FedRAMP.
• Familiar with networking concepts including routing and security groups.
• Hands-on experience with AWS cloud platforms is highly desirable.

Responsibilities

• Develop and document System Security Plans (SSPs) and Risk-Based Decisions (RBDs).
• Collaborate with teams to implement security controls effectively.
• Submit evidence for Security Control Assessments (SCAs).
• Remediate vulnerabilities through effective risk management.

Skills

NIST 800-53 security controls

Risk and vulnerability management

Security technologies (encryption, IAM)

Microservices architecture

SIEM technologies (e.g., Splunk)

AWS cloud security

Education

Relevant security certifications (e.g., CISSP, CCSP, CEH)

Tools

Docker

Kubernetes

Job description

Security Engineer with IRS MBI Clearance

We are offering an exciting opportunity for a Security Engineer with expertise in NIST 800-53 security controls and a strong technical background in risk and vulnerability management. The ideal candidate will play a crucial role in implementing security controls, assessing vulnerabilities, and ensuring compliance with federal cybersecurity frameworks such as FISMA, FedRAMP, and RMF.

Key Responsibilities:

• Develop, assess, and document System Security Plans (SSPs), Plan of Action and Milestones (POA&Ms), and Risk-Based Decisions (RBDs).
  
• Collaborate with developers and technical staff to guide the proper implementation of each security control family.
  
• Collect, organize, and submit evidence for Security Control Assessments (SCAs).
  
• Possess technical expertise in security technologies such as encryption methods, IAM concepts, and technologies like SAML, OIDC, SSO, and MFA.
  
• Experience with SIEM technologies (e.g., Splunk) and other monitoring tools.
  
• Identify and remediate vulnerabilities through risk and vulnerability management.
  
• Work across teams and with external customers to develop security strategies, design solutions, and provide guidance during deployment.
  

Required Qualifications:

• At least 8 years of experience in the Information Technology field with increasing responsibility.
  
• A minimum of 5 years of experience in Information Security solutions.
  
• Relevant security certifications (e.g., CISSP, CCSP, CEH).
  
• Deep understanding of NIST 800-53, RMF, FedRAMP, FISMA, and other federal security standards.
  
• Knowledge of system security vulnerabilities and effective remediation techniques.
  
• Familiarity with networking concepts, including subnetting, routing, VPC / VNet, security groups, load balancing, etc.
  
• Experience with microservices-based architectures and designing security solutions for multi-tenant applications, using containerization and orchestration tools like Docker and Kubernetes (highly desirable).
  
• Hands-on experience supporting security for AWS cloud platforms (highly desirable).
  
• Candidates must be U.S. Citizens or Legal Permanent Residents (Green Card holders) for at least 3 years and be Federal Tax compliant.