Security Engineer: GovCloud & Compliance for Defense

Mosaic.tech; Boston (MA); On-site; USD 120,000 - 180,000; Full time

Job summary

Air Space Intelligence seeks a Security Engineer to harden and maintain cloud and software environments, ensuring compliance with U.S. government security standards.

You will work on AWS GovCloud and GCC High, supporting NIST 800-171/CMMC and 800-53, and collaborate with product, platform, and compliance teams in a Boston-based office. Ideal candidates have strong Python or Rust skills, container security experience, and familiarity with SBOM, threat modeling, and IaC tools like Terraform.

Qualifications

• Candidates experienced with modern cloud security and government-facing environments.
• Proven ability to harden cloud and software stacks to meet government standards (NIST 800-171/CMMC, NIST 800-53).
• US citizenship and eligibility for DoD clearance are required.

Responsibilities

• Harden and maintain cloud and endpoint environments (AWS GovCloud, Microsoft GCC High).
• Support compliance with U.S. government security standards (NIST, CMMC, FedRAMP).
• Lead threat modeling sessions and security reviews throughout the SDLC.

Skills

Python

Rust

Kubernetes

CI/CD security

Vulnerability scanning

SBOM

Threat modeling

Terraform

FedRAMP/NIST

AWS GovCloud

Incident response

SIEM

Tools

AWS GuardDuty

Splunk

Microsoft Sentinel

Terraform

Job description

Air Space Intelligence seeks a Security Engineer to harden and maintain cloud and software environments, ensuring compliance with U.S. government security standards.

You will work on AWS GovCloud and GCC High, supporting NIST 800-171/CMMC and 800-53, and collaborate with product, platform, and compliance teams in a Boston-based office. Ideal candidates have strong Python or Rust skills, container security experience, and familiarity with SBOM, threat modeling, and IaC tools like Terraform.