Security Engineer – Cloud & DevSecOps for Federal Apps

Corbalt; United States; On-site; USD 139,000 - 182,000; Full time

Benefits offered by this job

Medical benefits

Bonuses

401(k)

Paid time off

Company retreats

Job summary

Corbalt is a technology company partnering with federal agencies to modernize complex technology ecosystems. We operate as a remote-first team, with opportunities to contribute to security across government services.

This contingent Security Engineer role focuses on integrating security into the development lifecycle and building cloud-native, secure systems. The role emphasizes automating security practices, collaborating with engineers, and supporting assessments and compliance in regulated

Qualifications

• 3+ years of engineering experience.
• Experience supporting security assessments, compliance, or continuous monitoring.
• Familiarity with federal cloud and security requirements (e.g., FISMA).
• Experience operating in AWS, Azure, or Google Cloud.

Responsibilities

• Integrate security into the software development lifecycle through automation, testing, and continuous improvement.
• Identify, investigate, and remediate application and infrastructure vulnerabilities.
• Develop tools and automation in Python, Go, or Terraform to improve security and visibility.
• Support security assessments, compliance activities, and continuous monitoring.
• Contribute to security best practices across engineering teams.

Skills

Software engineering

Security

DevSecOps

Cloud security

Secure design

Authn/Authz

Programming language

Infrastructure as code

Collaboration

Tools

Python

Go

Terraform

Job description

Corbalt is a technology company partnering with federal agencies to modernize complex technology ecosystems. We operate as a remote-first team, with opportunities to contribute to security across government services.

This contingent Security Engineer role focuses on integrating security into the development lifecycle and building cloud-native, secure systems. The role emphasizes automating security practices, collaborating with engineers, and supporting assessments and compliance in regulated