→ Lead Security Engineer

EdgeTheory, LLC; Oxford, Northern (MS, KY); Hybrid; USD 130,000 - 190,000; Full time

Job summary

EdgeTheory is seeking a Lead Security Engineer to own our security program end to end, spanning application security, AWS infrastructure, endpoints, and facilities. This senior role reports to the CTO and collaborates with the engineering team to implement secure-by-default practices.

The candidate will drive FedRAMP and DoD IL authorization efforts, establish secure coding standards, and govern vulnerability management, IAM design, and incident response. Remote flexibility available.

Qualifications

• 5+ years in security engineering, infrastructure security, or security operations.
• Deep hands-on AWS security experience (IAM, VPC design, KMS, GuardDuty, Security Hub, CloudTrail) on Amazon Linux.
• Strong working knowledge of NIST 800-53 controls and continuous monitoring practices.
• Experience taking an organization through — or materially supporting — a FedRAMP and/or DoD IL authorization.
• Experience securing CI/CD and infrastructure-as-code (Jenkins, OpenTofu, or similar).
• Experience with secrets management (OpenBao / HashiCorp Vault, or similar).
• Experience with observability and detection tooling (Datadog or similar SIEM/monitoring).
• Experience hardening database and search infrastructure (MySQL, Elasticsearch).
• Ability to script and automate in Python, Bash, or similar.
• Identity and access management design experience (SSO, LDAP, least-privilege enforcement).
• Experience managing and securing a device fleet (endpoint hardening, MDM).
• Excellent written and verbal communication — able to write control documentation and brief both engineers and leadership.
• Must be a U.S. citizen (required for DoD IL5 personnel access).

Responsibilities

• Own EdgeTheory's overall security posture across code, cloud, endpoints, and facilities.
• Design and maintain hardened AWS infrastructure (IAM, network segmentation, encryption, key management, logging).
• Lead the effort toward FedRAMP (Moderate/High) and DoD IL authorization — control mapping, documentation, POA&M, and continuous monitoring — with a roadmap toward IL6.
• Establish secure coding standards and embed security review into the engineering workflow and CI/CD pipeline.
• Secure infrastructure-as-code and deployment automation (OpenTofu, Jenkins CI/CD).
• Manage secrets, credentials, and key material across build and deployment systems using OpenBao.
• Stand up vulnerability management — scanning, prioritization, and remediation tracking.
• Deploy and monitor detection and logging (Datadog, AWS GuardDuty / Security Hub / Inspector).
• Lead incident response: detection, containment, investigation, and post-incident review.
• Administer endpoint and mobile device security (laptops, phones) — hardening, MDM, encryption.
• Own physical and facility security across the EdgeTheory lab and satellite offices (door access, badging, visitor control).
• Work closely with the engineering team to make secure-by-default the path of least resistance.
• Track evolving DoD and federal compliance requirements and translate them into concrete controls.

Skills

Security engineering

Cloud security

CI/CD security

Secrets management

Vulnerability management

Incident response

DoD IL authorization

NIST 800-53

IAM design

Scripting - Python

Scripting - Bash

Communication

Tools

AWS

OpenTofu

Jenkins

OpenBao

HashiCorp Vault

Datadog

MySQL

Elasticsearch

LDAP

Job description

See below for our latest career and internship opportunities

Lead Security Engineer

EdgeTheory is looking for a Lead Security Engineer to own our security program end to end — spanning application security, AWS infrastructure, endpoints, and facilities — and to lead our path toward FedRAMP and DoD Impact Level authorization. This is a senior, high-trust role reporting directly to the CTO, working hand in hand with the engineering team.

RESPONSIBILITIES

• Own EdgeTheory's overall security posture across code, cloud, endpoints, and facilities
• Design and maintain hardened AWS infrastructure (IAM, network segmentation, encryption, key management, logging)
• Lead the effort toward FedRAMP (Moderate/High) and DoD Impact Level (IL4/IL5) authorization — control mapping, documentation, POA&M, and continuous monitoring — with a roadmap toward IL6
• Establish secure coding standards and embed security review into the engineering workflow and CI/CD pipeline
• Secure infrastructure-as-code and deployment automation (OpenTofu, Jenkins CI/CD)
• Manage secrets, credentials, and key material across build and deployment systems using OpenBao
• Stand up vulnerability management — scanning, prioritization, and remediation tracking
• Deploy and monitor detection and logging (Datadog, AWS GuardDuty / Security Hub / Inspector)
• Lead incident response: detection, containment, investigation, and post-incident review
• Administer endpoint and mobile device security (laptops, phones) — hardening, MDM, encryption
• Own physical and facility security across the EdgeTheory lab and satellite offices (door access, badging, visitor control)
• Work closely with the engineering team to make secure-by-default the path of least resistance
• Track evolving DoD and federal compliance requirements and translate them into concrete controls

QUALIFICATIONS

• 5+ years in security engineering, infrastructure security, or security operations
• Deep hands-on AWS security experience (IAM, VPC design, KMS, GuardDuty, Security Hub, CloudTrail) on Amazon Linux
• Strong working knowledge of NIST 800-53 controls and continuous monitoring practices
• Experience taking an organization through — or materially supporting — a FedRAMP and/or DoD IL authorization
• Experience securing CI/CD and infrastructure-as-code (Jenkins, OpenTofu, or similar)
• Experience with secrets management (OpenBao / HashiCorp Vault, or similar)
• Experience with observability and detection tooling (Datadog or similar SIEM/monitoring)
• Experience hardening database and search infrastructure (MySQL, Elasticsearch)
• Ability to script and automate in Python, Bash, or similar
• Identity and access management design experience (SSO, LDAP, least-privilege enforcement)
• Experience managing and securing a device fleet (endpoint hardening, MDM)
• Excellent written and verbal communication — able to write control documentation and brief both engineers and leadership
• Must be a U.S. citizen (required for DoD IL5 personnel access)

PREFERRED

• Experience in a regulated defense, govtech, or federal environment
• SIEM operations and incident response experience
• Familiarity with SOC 2 and/or ISO 27001
• Relevant certifications (CISSP, AWS Security Specialty, CKS)
• Experience securing AI/LLM systems and data pipelines
• Prior work with AWS GovCloud
• Physical security / facility access control experience
• Experience with CMMC

LOCATION

Flexible – Primarily remote with the option to work from our Oxford, MS headquarters as needed.

EdgeTheory transforms the information environment into decision-readyintelligence - detecting emerging risks, assessing narrative trajectories, and enabling strategic response before threats reach critical momentum.