Security Engineer - FedRAMP & AWS GovCloud Incident Leader

NewGen Technologies; Herndon (VA); On-site; USD 140,000 - 170,000; Full time

Job summary

NewGen Technologies is seeking a Security Engineer to monitor systems, analyze alerts, and lead incident response for FedRAMP/FISMA Moderate workloads in AWS GovCloud. The role requires UiPath architecture experience, RBAC design, and secure SDLC practices.

You will refine detection capabilities, tune SIEM rules, and produce regular threat reports while coordinating with cross-functional teams. US citizenship and active clearance are required.

Qualifications

• Citizenship and clearance requirements are mandatory.
• Experience with FedRAMP or FISMA Moderate systems in AWS GovCloud.
• Hands-on UiPath architecture and Orchestrator experience.
• Knowledge of RBAC, separation of duties, and session/audit logging.

Responsibilities

• Monitor systems for abnormal activity.
• Analyze alerts, distinguish threats from false positives, categorize incidents by risk.
• Lead incident response: containment, eradication, recovery, post-incident analysis and documenting steps.
• Optimize detection capabilities: refine alert thresholds, tune SIEM rules, integrate new data sources, reduce false positives.
• Compile weekly/monthly reports on incident trends, threat activity, and security posture for internal stakeholders.
• Actively participate in team meetings, threat intel reviews, and cross-departmental syncs.

Skills

US Citizenship

MBI Clearance

FedRAMP/FISMA Security

AWS GovCloud

Incident response

SIEM tuning

UiPath

RBAC

NIST SP 800-53 Rev 5

STIG/CIS hardening

Vulnerability management

Secure SDLC

Code review

Excel

Word

Tools

UiPath Orchestrator

Microsoft Excel

Microsoft Word

Job description

NewGen Technologies is seeking a Security Engineer to monitor systems, analyze alerts, and lead incident response for FedRAMP/FISMA Moderate workloads in AWS GovCloud. The role requires UiPath architecture experience, RBAC design, and secure SDLC practices.

You will refine detection capabilities, tune SIEM rules, and produce regular threat reports while coordinating with cross-functional teams. US citizenship and active clearance are required.