Remote Cloud Security Engineer - GovCloud Expertise

ICF; Reston (VA); On-site; USD 81,499 - 138,549; Full time

Job summary

ICF is seeking an experienced Software Security Engineer to lead mission-critical initiatives for a government customer. You will safeguard applications and cloud-based systems by integrating security best practices throughout the software development lifecycle.

This remote role requires active Top Secret clearance and hands-on cloud security experience, with a focus on secure coding, risk reduction, and DevSecOps, while coordinating with federal partners and internal teams.

Qualifications

• Active Top Secret clearance.
• 2+ years of experience in application security or cybersecurity engineering.
• Bachelor’s degree in Cybersecurity, CS, IT, or related field.
• Experience with cloud platforms in AWS (e.g., AWS GovCloud) and secure cloud environments.

Responsibilities

• Monitor and assess application and system security to identify vulnerabilities.
• Conduct secure code reviews and static/dynamic analysis.
• Test security tools and configurations to validate compliance with federal and DoD requirements.
• Investigate and remediate vulnerabilities and implement corrective actions to reduce risk.
• Design and implement security controls for cloud and on-prem environments.
• Provide guidance on secure coding and DevSecOps to development teams.
• Maintain security architecture documentation and mitigation strategies.
• Deliver executive briefings to government stakeholders and leadership.
• Collaborate with internal and external partners to sustain a positive work environment.

Skills

Application security

Cloud security

Secure coding practices

Education

Bachelor’s degree in Cybersecurity, CS, IT, or related field

Tools

SAST

DAST

SCA

AWS GovCloud

Job description

ICF is seeking an experienced Software Security Engineer to lead mission-critical initiatives for a government customer. You will safeguard applications and cloud-based systems by integrating security best practices throughout the software development lifecycle.

This remote role requires active Top Secret clearance and hands-on cloud security experience, with a focus on secure coding, risk reduction, and DevSecOps, while coordinating with federal partners and internal teams.