Federal Security Engineer - ConMon & Release Gate Lead

C3.ai, Inc.; Tysons (VA); On-site; USD 134,000 - 167,000; Full time

Job summary

C3 AI, headquartered in Tysons, Virginia, seeks an experienced Federal Security Engineer to own release-gate evidence, automate continuous monitoring, and interface with FedRAMP boundary partners. This role ensures federal deployments meet strict security standards across the full lifecycle and requires US citizenship or permanent residence.

Responsibilities include maintaining ConMon automation, coordinating with cross-functional teams, and addressing unique federal security requirements while

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum of 5+ years of experience in information security, DevSecOps, or a related field.
• Strong understanding of security principles, practices, and technologies.
• Experience with vulnerability management activities (CVEs, IOCs, etc.).
• Experience with Linux and scripting languages such as JavaScript, Shell, and/or Python.
• Active DoD 8570 IAT II or above certification (e.g., CISSP or Security+), or ability to obtain.
• Hands-on experience with SCAP/OpenSCAP tooling and automated STIG scanning/remediation.

Responsibilities

• Own per-release gate evidence across the Federal Release-Gate Standard gates.
• Build and maintain ConMon automation: BOM, POA&M classification, and a live metrics feed.
• Interface with SMX on FedRAMP boundary-register items (image provenance, patch-uplift).
• Address Federal customer security requirements without compromising solution integrity.
• Support high-visibility defense and intelligence projects with stringent security requirements.
• Triage and resolve security vulnerabilities reported by Federal customers.
• Ensure compliance with STIG, SCAP/OpenSCAP and related standards.
• Manage hardened container registries for Federal deployments.
• Collaborate with Product, Engineering, and Compliance to upstream controls and resolve issues.
• Overlay customer-specific controls while maintaining C3 AI's security posture.
• Stay up-to-date with security trends, vulnerabilities, and technologies.

Skills

Information security

DevSecOps

Vulnerability management

Security principles

Communication

Python

Shell

JavaScript

Education

Bachelor's degree in Computer Science, Information Security, or a related field

Tools

SCAP/OpenSCAP tooling

Automated STIG scanning

FedRAMP tooling

Job description

C3 AI, headquartered in Tysons, Virginia, seeks an experienced Federal Security Engineer to own release-gate evidence, automate continuous monitoring, and interface with FedRAMP boundary partners. This role ensures federal deployments meet strict security standards across the full lifecycle and requires US citizenship or permanent residence.

Responsibilities include maintaining ConMon automation, coordinating with cross-functional teams, and addressing unique federal security requirements while