Security Engineering Lead (Hybrid) — Government & NIST

TSTC; Colorado Springs (CO); Hybrid; USD 155,000 - 170,000; Full time

Benefits offered by this job

Competitive salary

Bonus opportunities

Health coverage

Remote work options

Paid time off

Job summary

TSTC is seeking a security engineer lead for a hybrid role in Annapolis Junction, MD or Colorado Springs, CO. You will guide security requirements, translate standards into actionable work, and mentor junior staff while coordinating with senior leadership.

The role demands hands-on expertise, strong communication, and the ability to manage complex security programs across government contracts.

Qualifications

• Bachelor’s Degree and 15 years of related security engineering experience.
• CISSP or CISM certification required.
• Ability to translate NIST/government standards into actionable tasks.
• Lead security requirements allocation and architecture processes.
• Experience with security scan tools and techniques.

Responsibilities

• Provide SME guidance on security requirements allocation and architecture.
• Translate NIST/government standards into actionable tasks and reviews.
• Lead responses to federal ad hoc reporting requirements and briefings.
• Mentor junior staff and coordinate tasks across dispersed teams.
• Oversee impact analyses for new regulations and policies.

Skills

Security engineering leadership

NIST compliance

CISSP or CISM

Threat modeling

Security tooling expertise

Documentation & reporting

Mentoring junior staff

Education

Bachelor’s Degree in security or related field

Tools

Tenable Security Center

Invicti 360

Trustwave DbProtect

CyberArk Certificate Manager

Portswigger Burp Suite Pro

Job description

TSTC is seeking a security engineer lead for a hybrid role in Annapolis Junction, MD or Colorado Springs, CO. You will guide security requirements, translate standards into actionable work, and mentor junior staff while coordinating with senior leadership.

The role demands hands-on expertise, strong communication, and the ability to manage complex security programs across government contracts.