Senior Cloud Security Engineer CJIS & GovCloud

Citian; Washington (District of Columbia); On-site; USD 150,000 - 200,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Paid time off

401(k) match

Commuter transportation benefit

On-site gym

Free office snacks

Job summary

Citian is a fast-growing SaaS company in Washington, DC, delivering secure software for state transportation systems. We seek a hands-on security engineer who can define and enforce controls, manage encryption, access, and audits, and collaborate with customers and leadership.

You will drive security requirements across production systems, including data intake, identity management, and incident response, while aligning with CJIS, SOC 2, and NIST frameworks to meet agency expectations.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience.
• 6+ years in security, platform or infrastructure engineering, with a strong security focus in AWS.
• Has secured production systems against defined requirements, including building controls, keeping evidence and supporting independent assessments.
• Infrastructure as code (AWS CDK or Terraform) and core AWS security (IAM, KMS, networking, logging).
• Has investigated and responded to production security incidents.
• Has worked directly with customer security or compliance teams.
• Uses AI coding tools in daily work, checks their output, and keeps sensitive data out of unapproved AI services.

Responsibilities

• Lead security and compliance across our products: crash analytics, asset management, and crash data intake for state agencies. Build controls and prepare for audits.
• Secure the crash data intake product in AWS GovCloud with identity, MFA, encryption, key management, network isolation, logging, backup, and data handling limits.
• Set and enforce access controls for regulated customer data, including outside-US access restrictions.
• Translate contracts and security frameworks (SOC 2, CJIS) into concrete controls with owners and evidence.
• Be the technical contact for customers' security and compliance teams for questionnaires and audits.
• Run vulnerability discovery and prioritization across infrastructure, code, and dependencies; track remediation and exceptions.
• Set up security monitoring and incident response with on-call engineering teams.

Skills

Security engineering

Infrastructure as code

AWS security

Incident response

Security risk communication

Customer security liaison

Security tool usage (AI coding tools)

Education

Bachelor's degree in Computer Science or related field

Tools

AWS CDK

Terraform

IAM

KMS

Auth0/Okta

Drata

Job description

Citian is a fast-growing SaaS company in Washington, DC, delivering secure software for state transportation systems. We seek a hands-on security engineer who can define and enforce controls, manage encryption, access, and audits, and collaborate with customers and leadership.

You will drive security requirements across production systems, including data intake, identity management, and incident response, while aligning with CJIS, SOC 2, and NIST frameworks to meet agency expectations.