Senior Cloud Security Engineer for GovCloud & Compliance

Cyberjobs; Washington (District of Columbia); On-site; USD 150,000 - 200,000; Full time

Benefits offered by this job

Medical Insurance

401(k) match

On-site gym

Generous PTO

Job summary

Citian is a Washington, DC-based SaaS company delivering secure software for transportation and infrastructure. We are seeking a hands-on security engineer to secure production cloud systems, set security standards, and guide teams through risk trade-offs.

You will work with leadership to define controls and ensure audits, including for CJIS/NIST, across multiple states. You will lead security across products, build controls for data intake in AWS GovCloud, enforce access controls, orchestrate

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience
• 6+ years in security, platform or infrastructure engineering, with a strong security focus in AWS
• Has secured production systems against defined requirements, including building controls, keeping evidence and supporting independent assessments
• Infrastructure as code (e.g., AWS CDK or Terraform) and core AWS security (IAM, KMS, networking, logging)
• Application and data security, including keeping customers' data separate and authorization; working knowledge of TypeScript, JavaScript or Python
• Has investigated and responded to production security incidents
• Has worked directly with customer security or compliance teams
• Uses AI coding tools in daily work, checks their output, and keeps sensitive data out of unapproved AI services

Responsibilities

• Lead security and compliance across our products: crash analytics, asset management, and crash data intake for state agencies
• Secure our crash data intake product, including identity and MFA, encryption and key management, network isolation, logging and alerts, backup and recovery, retention and deletion
• Set and enforce access controls for regulated customer data, including contract limits on access from outside the US
• Translate security frameworks (SOC 2, CJIS, NIST SP 800-53) into concrete controls with owners and evidence
• Be the technical contact for customers' security and compliance teams with CS, architecture reviews and audits
• Run vulnerability management across infrastructure, code and dependencies; prioritize fixes and track exceptions
• Set up security monitoring and incident response with on-call teams
• Write security standards for engineers and AI agents and embed checks in development/deploy pipelines
• Decide when outside help is needed (assessors, pen testers, managed services) and lead that work

Skills

AWS Security

IAM/KMS

IaC (CDK/Terraform)

Vulnerability Mgmt

Security Audits

Incident Response

Data Privacy

AI Tools Usage

Encryption

Security Communications

Education

Bachelor's degree in CS or related

Tools

AWS CDK

Terraform

Drata

Okta/Auth0

KMS

Job description

Citian is a Washington, DC-based SaaS company delivering secure software for transportation and infrastructure. We are seeking a hands-on security engineer to secure production cloud systems, set security standards, and guide teams through risk trade-offs.

You will work with leadership to define controls and ensure audits, including for CJIS/NIST, across multiple states. You will lead security across products, build controls for data intake in AWS GovCloud, enforce access controls, orchestrate