Lead Security Engineer / DTAM / (Hybrid) [Contingent]

iWorks Corporation; New York (NY); Hybrid; USD 135,000 - 170,000; Full time

Benefits offered by this job

Bonuses throughout the year

Annual raise

Comprehensive benefits

Job summary

iWorks Corporation, a leading provider of IT and professional services to the federal government, seeks a Lead Security Engineer to drive security across the Decennial Transformation and Application Modernization (DTAM) initiative. This remote/hybrid role focuses on embedding security into DevSecOps, cloud modernization, and scalable data processing.

You will lead security initiatives, manage staff, and coordinate with senior stakeholders to deliver secure systems and compliance across federal

Qualifications

• Bachelor's degree or equivalent experience in a related field.
• 15+ years of experience in cybersecurity or security engineering.
• Experience leading technical and management efforts on large-scale IT or federal programs.
• Ability to define goals, plans, and execution strategies and interface with senior stakeholders.

Responsibilities

• Provide technical and management leadership across security initiatives supporting DTAM objectives.
• Define goals, plans, and methods aligned with federal cloud modernization.
• Direct security engineering across development, integration, and operations environments.
• Ensure secure systems via DevSecOps practices and governance.
• Lead implementation of security controls, policies, and frameworks.
• Oversee security architecture standards, reviews, and trade-off analyses.
• Support vulnerability management, audits, and authorization activities.
• Integrate security tooling into CI/CD pipelines and cloud environments.
• Manage staffing, delivery methods, and financial oversight for security workstreams.
• Engage with client leadership through briefings and technical consultations.
• Mentor security engineering staff.

Skills

Security leadership

DevSecOps

Cloud security

Security governance

Vulnerability management

Education

Bachelor's degree in CS / Cybersecurity / IS

Tools

GitLab CI/CD

Jenkins

Terraform / CloudFormation

SAST/DAST

Job description

Title: Lead Security Engineer

Location: Remote / Hybrid (On site-visits to the DMV location as required by contract)

iWorks Corporation, founded in 2005, is a leading provider of information technology and professional services to the federal government. We are a recognized leader in personnel security and vetting solutions, Agile, DevOps, DevSecOps, data analytics, and cloud solutions. Our continuous process improvement approach, combined with our business and technology expertise, results in innovative solutions.

We offer exceptional comprehensive benefits (Medical, Dental, Vision, Life and Disability); 401(k); Health and Wellness Benefits; and Paid Sick Time, Vacation Time, and Holiday Time. Employees are eligible for bonuses throughout the year as part of our incentive program for innovation and business development. All employees are also considered for an annual raise, commensurate with performance and company commitment.

About this position:

The Lead Security Engineer supports the Decennial Transformation and Application Modernization (DTAM) initiative, a federal program designed to modernize the U.S. Census Bureau's Decennial Census systems into a cloud-smart, data-centric, and secure IT environment.

This role provides both technical and management leadership across enterprise security initiatives, ensuring secure modernization of applications, data systems, and cloud infrastructure. The position plays a critical role in embedding security into DevSecOps pipelines and supporting secure, scalable, near real-time data processing and analytics.

*This position is contingent upon contract award.

Salary Range: –$135K – $170K commensurate with the candidate's skills, experience, location, and qualifications.

On a day-to-day basis, you will:

1. Provide technical and management leadership across major security and modernization initiatives supporting DTAM objectives
2. Define and execute project goals, plans, and methods aligned with federal cloud modernization efforts
3. Direct security engineering activities across application development, integration, and operations environments
4. Ensure delivery of secure systems through DevSecOps practices and enterprise security governance
5. Lead implementation of application security controls, policies, and frameworks
6. Oversee security architecture standards, design reviews, and technical trade-off analyses
7. Support vulnerability management, security testing, audits, and authorization activities
8. Guide integration of security tooling into CI/CD pipelines and cloud-native environments
9. Manage staffing, delivery methods, and financial oversight for assigned security workstreams
10. Engage with client stakeholders and senior leadership through briefings, negotiations, and technical consultations
11. Supervise and mentor security engineering staff as assigned

Required Education/Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or related field (or equivalent experience)
• 15+ years of experience in cybersecurity and/or security engineering role
• Demonstrated experience leading technical and management efforts on large-scale IT or federal programs
• Proven ability to define goals, plans, and execution strategies for complex security initiativesExperience interfacing with senior government or enterprise stakeholders

Cybersecurity Frameworks & Compliance

• NIST Risk Management Framework (RMF)
• NIST 800-53 security controls
• FedRAMP security requirements
• Security Authorization processes
• SSPs and POA&Ms
• Vulnerability management programs

Application & Software Security

• Secure Software Development Lifecycle (SSDLC)
• Application security architecture
• Secure coding practices
• SAST/DAST/SCA tools
• Dependency and vulnerability scanning
• SBOM processes
• API security

DevSecOps Security

• Security integration into CI/CD pipelines
• GitLab CI/CD security practices
• Jenkins security integrations
• Azure DevOps security controls
• Automated security testing

Cloud & Container Security

• AWS GovCloud, Azure Government, OCI Government, or GCP
• Cloud security architecture
• Kubernetes security
• Docker/container security
• Infrastructure-as-Code security reviews
• Terraform and CloudFormation security considerations

Security Operations

• SIEM platforms
• Security monitoring
• Threat detection
• Security analytics
• Continuous monitoring practices

Required Certifications:

• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)

Preferred Certifications:

• Certified Information Systems Security Professional (CISSP)
• Certified Cloud Security Professional (CCSP)

Please Note: We maintain an on-camera policy for all virtual company meetings to foster engagement and collaboration. Reasonable exceptions may be granted with prior approval from Human Resources and/or the applicable manager or client.

FLSA & EMPLOYMENT STATUS: FLSA EXEMPT AND FULL-TIME POSITION.

iWorks Corporation is an Equal Employment Opportunity/Affirmative Action Employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, Veteran status, sexual orientation, or other protected characteristic.

iWorks is committed to maintaining a safe and productive work environment for all employees and ensuring the security and well-being of our clients. As part of our standard hiring process, we may conduct background checks and drug screenings on potential candidates to assess their suitability for employment.