Lead Security Engineer - Remote

Maximus; United States; On-site; USD 141,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Life and disability insurance

Retirement savings plan

Paid holidays and paid time off

Job summary

Maximus in the United States is seeking a Lead Security Engineer to work across AI, Enterprise Architecture, and Business Development teams, guiding cybersecurity implementations and protecting federal information systems.

This role supports security operations, compliance activities, vulnerability management, cloud security initiatives, and system authorization efforts in accordance with federal security requirements, with up to 10% travel.

Qualifications

• Bachelor's Degree or equivalent experience and 7+ years in security engineering.
• Experience with US Federal government security engineering.
• Strong knowledge of NIST 800-53 and NIST 800-171 controls.
• Experience securing CI/CD pipelines and cloud security in AWS/Azure.

Responsibilities

• Provide guidance on Information Security solutions and mentor engineers.
• Lead information security projects and provide technical leadership.
• Implement, configure, and maintain Information Security solutions.
• Coordinate planning and resource alignment across teams.
• Advise on security controls across cloud, network, and endpoints.
• Perform security assessments, vulnerability analysis, and remediation tracking.
• Support Zero Trust and cloud security best practices.

Skills

Information Security

Security Engineering

Zero Trust

NIST 800-53

NIST 800-171

Cloud security

Vulnerability management

Education

Bachelor's Degree or equivalent experience

Tools

SIEM

EDR

Firewalls

Vulnerability scanning tools

Job description

Description & Requirements

The Lead Security Engineer will work across AI, Enterprise Architecture, and Business Development teams. This role will assist with implementations, provide guidance to improve cybersecurity controls that protect federal information systems and data. This role supports security operations, compliance activities, vulnerability management, cloud security initiatives, and system authorization efforts in accordance with federal security requirements.

• Serve as a subject matter expert and provide guidance on Information Security solutions, supporting other engineers in selection, integration, and optimization.
• Lead or actively contribute to other information security projects and operational duties, offering technical leadership and mentorship throughout.
• Implementation, configuration, and maintenance of Information Security solutions, ensuring best practices are followed and providing direction to engineering staff as needed.
• Coordinate and oversee level of effort, planning, and support for enterprise project-level work, providing technical leadership and aligning resources across teams.
• Prioritize and direct execution of program elements based on risk, business objectives, and organizational impact.
• Advise on security controls across cloud, network, and endpoint application environments.
• Perform security assessments, vulnerability analysis, and remediation tracking.
• Advise on security technologies such as SIEM, EDR, firewalls, and vulnerability scanning tools.
• Collaborate with system administrators, network engineers, and CI/CD Pipeline Engineers to address security risks.
• Assist with development and maintenance of security documentation, policies, procedures, and system security plans.
• Provide recommendations for improving security posture, compliance, and operational efficiency.
• Support implementation of Zero Trust, secure configuration management, and cloud security best practices.
• Review proposals/bids to confirm technical compliance requirements.
• Act as a technical ISO stakeholder in Enterprise Risk and Assurance activities
• Communicate upcoming initiatives, solution designs, and security or compliance considerations to ISO leadership.
  
• Bachelor\'s Degree or equivalent experience and 7+ Years
• 5+ years of Security Engineering experience.
• Experience working with the US Federal government (current/previous federal employee or federal contractor) in a security engineering capacity.
• NIST 800-53 Security and Privacy Controls for Information Systems and Organizations
• NIST 800-171 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations
• Strong background regarding how to secure CI/CD pipelines.
• Good understanding of networking connectivity and network security controls.
• Understand endpoint security (servers, workstations)
• Understand applied Zero Trust.
• Experience with vulnerability management and remediation processes.
• Experience with Cloud security in AWS and/or Azure environment.
• Up to 10% travel is required.

Requirements

Description & Requirements

The Lead Security Engineer will work across AI, Enterprise Architecture, and Business Development teams. This role will assist with implementations, provide guidance to improve cybersecurity controls that protect federal information systems and data. This role supports security operations, compliance activities, vulnerability management, cloud security initiatives, and system authorization efforts in accordance with federal security requirements.

Essential Duties And Responsibilities

• Serve as a subject matter expert and provide guidance on Information Security solutions, supporting other engineers in selection, integration, and optimization.
• Lead or actively contribute to other information security projects and operational duties, offering technical leadership and mentorship throughout.
• Implementation, configuration, and maintenance of Information Security solutions, ensuring best practices are followed and providing direction to engineering staff as needed.
• Coordinate and oversee level of effort, planning, and support for enterprise project-level work, providing technical leadership and aligning resources across teams.
• Prioritize and direct execution of program elements based on risk, business objectives, and organizational impact.
• Advise on security controls across cloud, network, and endpoint application environments.
• Perform security assessments, vulnerability analysis, and remediation tracking.
• Advise on security technologies such as SIEM, EDR, firewalls, and vulnerability scanning tools.
• Collaborate with system administrators, network engineers, and CI/CD Pipeline Engineers to address security risks.
• Assist with development and maintenance of security documentation, policies, procedures, and system security plans.
• Provide recommendations for improving security posture, compliance, and operational efficiency.
• Support implementation of Zero Trust, secure configuration management, and cloud security best practices.
• Review proposals/bids to confirm technical compliance requirements.
• Act as a technical ISO stakeholder in Enterprise Risk and Assurance activities
• Communicate upcoming initiatives, solution designs, and security or compliance considerations to ISO leadership.
  

Minimum Requirements

• Bachelor\'s Degree or equivalent experience and 7+ Years
• 5+ years of Security Engineering experience.
• Experience working with the US Federal government (current/previous federal employee or federal contractor) in a security engineering capacity.
• NIST 800-53 Security and Privacy Controls for Information Systems and Organizations
• NIST 800-171 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations
• Strong background regarding how to secure CI/CD pipelines.
• Good understanding of networking connectivity and network security controls.
• Understand endpoint security (servers, workstations)
• Understand applied Zero Trust.
• Experience with vulnerability management and remediation processes.
• Experience with Cloud security in AWS and/or Azure environment.
• Up to 10% travel is required.

Candidate will be subject to a government background investigation and must meet eligibility and suitability requirements for a Public Trust Clearance.

• U.S. Citizenship is required, per contractual requirements.
• Any of the following is preferred: CISSP, CISA, CCSP, CISM, GIAC, AWS Security, or Azure Security certifications.
  

EEO Statement

Maximus is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information and other legally protected characteristics.

Pay Transparency

Maximus compensation is based on various factors including but not limited to job location, a candidate\'s education, training, experience, expected quality and quantity of work, required travel (if any), external market and internal value analysis including seniority and merit systems, as well as internal pay alignment. Annual salary is just one component of Maximus\'s total compensation package. Other rewards may include short- and long-term incentives as well as program-specific awards. Additionally, Maximus provides a variety of benefits to employees, including health insurance coverage, life and disability insurance, a retirement savings plan, paid holidays and paid time off. Compensation ranges may differ based on contract value but will be commensurate with job duties and relevant work experience. An applicant\'s salary history will not be used in determining compensation. Maximus will comply with regulatory minimum wage rates and exempt salary thresholds in all instances.

Accommodations

Maximus provides reasonable accommodations to individuals requiring assistance during any phase of the employment process due to a disability, medical condition, or physical or mental impairment. If you require assistance at any stage of the employment process—including accessing job postings, completing assessments, or participating in interviews,—please contact People Operations at [e-mail] .

Minimum Salary

$

141,270.00

Maximum Salary

$

180,000.00