Federal Security Engineer – DevSecOps & Compliance

Steampunk; Bloomington (IL); On-site; USD 100,000 - 155,000; Full time

Job summary

Steampunk is seeking a Security Engineer to support a government customer. The role focuses on ensuring security posture is implemented and maintained while guiding teams through remediation and compliance tasks.

Strong hands-on engineering experience and clear communication with stakeholders are essential. Responsibilities span monitoring vulnerabilities, maintaining POA&Ms, and engineering secure development practices across Waterfall, Agile, and DevSecOps environments.

Qualifications

• Ability to obtain a U.S. government Security Clearance
• Knowledge of federal cybersecurity regulations and standards
• Experience with vulnerability scanning and analysis
• Experience with security concepts, risk management, and compliance

Responsibilities

• Review the security architecture of new systems, applications, and technologies
• Recommend mitigation measures and advise on design trade‑offs
• Monitor and respond to ISVM alerts and drive remediation
• Maintain Plans of Action and Milestones (POA&Ms)
• Evaluate waivers and risk acceptance memos and manage system risk
• Support DevSecOps activities and integrate security into SDLC processes
• Ensure security requirements are included throughout development lifecycles

Skills

Security Clearance

Vulnerability assessment

Cloud engineering

Config management

Education

No degree, 8 years experience

Bachelor's degree +4 years

Master's degree +1 year

Tools

Splunk

Job description

Steampunk is seeking a Security Engineer to support a government customer. The role focuses on ensuring security posture is implemented and maintained while guiding teams through remediation and compliance tasks.

Strong hands-on engineering experience and clear communication with stakeholders are essential. Responsibilities span monitoring vulnerabilities, maintaining POA&Ms, and engineering secure development practices across Waterfall, Agile, and DevSecOps environments.