Security Engineer — GovCloud & Cloud Security Lead

ASI; Boston (MA); On-site; USD 120,000 - 160,000; Full time

Job summary

Air Space Intelligence in Boston is seeking a Security Engineer to harden and maintain cloud and endpoint environments, ensuring compliance with U.S. government security standards such as NIST 800-171/CMMC and 800-53.

You will secure AWS GovCloud and GCC High, perform vulnerability management, threat modeling, and automation for configuration management, patching, and policy enforcement. You’ll collaborate with product, Platform, and compliance teams to embed security in the SDLC, support

Qualifications

• Demonstrated coding skills in Python/Rust
• Knowledge of container and CI/CD security (Kubernetes, image hardening, vulnerability scanning)
• Investigate & remediate vulnerabilities, escalating complex issues when needed
• Supply chain security experience (SBOM, artifact generation, dependency management)
• Lead threat modeling sessions using established industry methodologies (e.g., STRIDE, PASTA, etc.)
• Demonstrated skills in Infrastructure as a code (Terragrunt/Terraform).
• Practical exposure to federal security frameworks (CMMC, NIST 800-53, FedRAMP).
• Experience securing government cloud environments (AWS GovCloud), ensuring compliance with federal security requirements.
• Hands-on experience with cloud-native incident alerting services (e.g., AWS GuardDuty/Security Hub, Azure Defender, etc.)
• Automate configuration management, patching, and policy enforcement for networks, servers, and endpoints
• Monitor security events using SIEM tools (Microsoft Sentinel, Splunk)
• Collaborate with product, Platform, and compliance teams to embed security in the SDLC
• Support incident response and post-incident review, growing toward leading these efforts over time

Responsibilities

• Harden and maintain ASI’s cloud and endpoint environments to meet government standards.
• Ensure compliance with NIST 800-171/CMMC and NIST 800-53.
• Support DoD clearance and security posture across AWS GovCloud and GCC High.
• Collaborate with product, Platform, and compliance teams to embed security in SDLC.
• Lead incident response and post-incident reviews over time.
• Investigate and remediate vulnerabilities.

Skills

Python

Rust

Kubernetes

Image hardening

Vulnerability scanning

SBOM

Dependency management

Threat modeling

Terragrunt/Terraform

FedRAMP/CMMC

AWS GovCloud

Microsoft Sentinel

Splunk

SIEM

SDLC security

Tools

Kubernetes

Terragrunt/Terraform

AWS GovCloud

Microsoft Sentinel

Splunk

Job description

Air Space Intelligence in Boston is seeking a Security Engineer to harden and maintain cloud and endpoint environments, ensuring compliance with U.S. government security standards such as NIST 800-171/CMMC and 800-53.

You will secure AWS GovCloud and GCC High, perform vulnerability management, threat modeling, and automation for configuration management, patching, and policy enforcement. You’ll collaborate with product, Platform, and compliance teams to embed security in the SDLC, support