Senior AWS Security Engineer- Remote

Lensa; Great Falls Crossing (VA); Remote; USD 98,000 - 167,000; Full time

Job summary

A leading technology services provider is seeking a Senior Security Engineer to support Federal customers. This role involves managing vulnerability remediation activities and ensuring compliance with federal IT security guidelines. The position is fully remote within the continental US and offers a competitive salary range.

Qualifications

• 4+ years of Cyber/Network security management experience.
• 3+ years of experience with AWS Security.
• Must be able to obtain Public Trust clearance.

Responsibilities

• Perform Security Impact Analyses and provide recommendations.
• Conduct software vulnerability scans and provide mitigation recommendations.
• Support Vulnerability Management activities for Cloud systems.

Skills

Cyber Security

AWS Security

Application Security

Vulnerability Scanning

SDLC Methodologies

Education

B.S. degree in Computer Science

Tools

Fortify WebInspect

Qualys

SonarQube

OWASP

Splunk

Java

SQL

Job description

1 day ago Be among the first 25 applicants

Lensa is the leading career site for job seekers at every stage of their career. Our client, ICF, is seeking professionals. Apply via Lensa today!

Description

We are open to supporting 100% remote work anywhere within the continental US

ICF’s Digital Modernization Division is a rapidly growing, entrepreneurial, technology department. Our team is a leading provider of Digital Transformation services for Federal agencies. Our services focus on enabling agency mission and business transformation using industry-leading low-code platforms, mobile applications, robotics process automation and data analytics platforms. We are partnered with some of the world’s leading and most innovative companies like Salesforce, ServiceNow, Microsoft and UiPath. We focus on offering a full range of architecture and planning, system implementation, integration, analytics and O&M for our customers.

We are seeking a Senior Security Engineer to support our Federal customer’s CIO Cyber Security organization and manage all vulnerability remediation activities, including Binding Operational Directive (BOD) compliance.

Responsibilities

• Perform Security Impact Analyses on application releases and provide recommendations to federal leadership
• Perform software vulnerability scans, interpret the results, and provide vulnerability mitigation recommendations
• Support and develop analyses of alternatives and decisions on courses of action by providing security insights to project teams and federal leadership
• Review and provide recommendations on requests for AWS policy changes
• Work with development teams and other stakeholders to review code and accurately flag False Positives in SonarQube and improve the overall utility of the tool
• Perform new software evaluation for cyber compliance and mitigation, section 508 compliance and privacy reviews of the software for authorization Approved Software list.
• The ability to write and review policy documentation based on industry standards.
• Support regular updates to secure coding standards documentation and the ongoing assessment of the customer organization against the NIST Cyber Security Framework
• Support Information Security Center vulnerability management groups by performing asset inventory, secure configurations and continuous monitoring, tracking and reporting and vulnerability service catalog.
• Support Vulnerability Management activities related specifically to Cloud systems, High Value Assets (HVAs), Mobile Device, and Internet of Things (IoT) assets including testing, certifying, verification and authorization activities.
• Based on your experiences and interests, we may ask you as a technology professional to support growth-related activities, including (but not limited to) RFI, RFP, prototypes, and oral presentations.
• Team members are also expected to uphold and maintain appropriate certifications necessary for their practice expertise.
  
  

Basic Qualifications

• 4+ years of Cyber/Network security management activities, including developing, writing and implementing procedures to ensure compliance with FISMA and NIST requirements, 508 compliance and other Federal IT security management guidelines.
• 3+ years of experience with AWS Security
• 3+ years of Application Security experience
• 3+ years of experience with software vulnerability scanning tools such as Fortify WebInspect, Qualys, and SonarQube, and familiarity of AWS policy.
• 2+ years of experience using SDLC Methodologies
• Due to federal contract, candidate must have been US Citizen or Green Card holder for 3 or more years.
• Must be able to obtain Public Trust clearance.
• MUST RESIDE IN THE United States (U.S.) and the work MUST BE PERFORMED in the United States (U.S.), as this work is for a federal contract and laws do apply.
  
  

Preferred Qualifications

• B.S. degree in Computer Science, Engineering or similar discipline
• 5+ years of Cyber/Network security management activities, including developing, writing and implementing procedures to ensure compliance with FISMA and NIST requirements, 508 compliance and other Federal IT security management guidelines.
• Experience with OWASP, Splunk, Java, SQL
• Experience with DAST and SAST
• Working Knowledge of CI/CD, APIs and WAF
  
  

Working at ICF

ICF is a global advisory and technology services provider, but we’re not your typical consultants. We combine unmatched expertise with cutting-edge technology to help clients solve their most complex challenges, navigate change, and shape the future.

We can only solve the world's toughest challenges by building a workplace that allows everyone to thrive. We are an equal opportunity employer. Together, our employees are empowered to share their expertise and collaborate with others to achieve personal and professional goals. For more information, please read ourEEO (https://www.icf.com/legal/equal-employment-opportunity) policy.

Reasonable Accommodations are available, including, but not limited to, for disabled veterans, individuals with disabilities, and individuals with sincerely held religious beliefs, in all phases of the application and employment process. To request an accommodation, please email [e-mail] and we will be happy to assist. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.

Read more about workplacediscriminationrigh t s or our benefit offerings which are included in the Transparency in (Benefits) Coverage Act.

Candidate AI Usage Policy

At ICF, we are committed to ensuring a fair interview process for all candidates based on their own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) tools to generate or assist with responses during interviews (whether in-person or virtual) is not permitted. This policy is in place to maintain the integrity and authenticity of the interview process.

However, we understand that some candidates may require accommodation that involves the use of AI. If such an accommodation is needed, candidates are instructed to contact us in advance at [e-mail] . We are dedicated to providing the necessary support to ensure that all candidates have an equal opportunity to succeed.

Pay Range - There are multiple factors that are considered in determining final pay for a position, including, but not limited to, relevant work experience, skills, certifications and competencies that align to the specified role, geographic location, education and certifications as well as contract provisions regarding labor categories that are specific to the position.

The pay range for this position based on full-time employment is:

$98,124.00 - $166,810.00

Nationwide Remote Office (US99)

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Contract

Job function

• Job function

  Information Technology

• Industries

  IT Services and IT Consulting

Referrals increase your chances of interviewing at Lensa by 2x

Get notified about new Senior Security Engineer jobs in Reston, VA.

Senior Solutions Engineer (SecOps Services) - Mid-Atlantic region (Remote in NC, VA, WV, MD, DC, DE, NJ, or PA)

Washington, DC $90,000.00-$130,000.00 18 hours ago

Security Engineer (SIEM/SOAR/SOC Optimization) - Mid-Atlantic region (Remote in NC, VA, WV, MD, DC, DE, NJ, or PA)

Washington, DC $110,000.00-$165,000.00 5 months ago

Security Engineer with Cloud Operations - 100% Remote

Reston, VA $110,000.00-$130,000.00 3 months ago

Identity Security Senior Staff Engineer (REMOTE)

Staff Security Engineer (Detection & Response)

Washington, DC $154,300.00-$165,000.00 1 week ago

Reston, VA $130,000.00-$160,000.00 1 week ago

Washington, DC $180,000.00-$200,000.00 6 days ago

Staff Security Operations Engineer, Incident Response Lead

Staff Security Engineer, Identity Defense Operations

Senior Application Security Engineer (Remote - USA)

Washington, DC $192,200.00-$225,810.00 2 weeks ago

Staff Security Engineer - Vulnerability Management Engineering (Remote)

Security/Software Engineer - Level III - Contract to Hire - Remote

Washington DC-Baltimore Area $170,000.00-$220,000.00 3 days ago

District of Columbia, United States 4 days ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.