Senior Security Engineer: Cloud, Compliance & AI Enablement

AUGUST SCHELL ENTERPRISES, INC.; Bethesda (MD); On-site; USD 150,000 - 210,000; Full time

Job summary

The National Library of Medicine (NLM) is seeking an IT Senior Security Engineer to join the Security Compliance team in Bethesda, MD. This role focuses on implementing security controls, achieving FISMA compliance, and enabling secure cloud adoption across platforms.

The hands-on engineer collaborates with the ISSO and enterprise security teams across vulnerability management, cloud security, SIEM, and AI-enhanced tooling to strengthen the organization’s security posture and protect

Qualifications

• Extensive experience securing on-premises and cloud environments (AWS, GCP, Azure) with strong knowledge of cloud security models and cross-platform operations in federal, regulated settings.
• 10+ years in information technology security with 7+ years in hands-on security engineering and 3+ years in cloud security and endpoint administration.
• Familiarity with AI/ML integration in security tooling for modern threat detection and remediation.
• Expertise applying FISMA, NIST 800-53, FedRAMP, RMF; supporting ATO/POA&M processes in governance and compliance.
• Experience with at least two security tools such as Tenable, Checkmarx, or Splunk, and vulnerability management workflows.
• Bachelor’s degree in computer science or related field (or equivalent experience).
• CISSP certification (or ability to obtain within 6 months).
• Strong collaboration and guidance for multi-disciplinary teams managing servers, workstations, network and security appliances.

Responsibilities

• Enhance and automate security and compliance checks; evaluate AI capabilities to improve coverage and efficiency.
• Implement and maintain security controls for on-prem and cloud environments (AWS, GCP, Azure) with FISMA and NIH policy compliance.
• Support identity access, privileged access, vulnerability management, encryption, network micro-segmentation, and centralized log management.
• Integrate and optimize SIEM solutions (e.g., Splunk) for continuous monitoring and compliance visibility in hybrid environments.
• Conduct threat modeling and security assessments of cloud deployments and migrations.
• Provide security guidance and best practices to developers, operations, and system owners.
• Analyze vulnerability data to identify systemic risks and drive remediation improvements.
• Contribute to documentation and standard operating procedures for the security program.

Skills

Cloud security

FISMA/NIST

Vulnerability management

Splunk

Tenable

Checkmarx

AI/ML security tooling

Linux/Windows admin

Documentation

Threat modeling

Education

Bachelor's degree in CS/IT

CISSP certification

Master's degree (preferred)

Tools

Tenable

Checkmarx

Splunk

Job description

The National Library of Medicine (NLM) is seeking an IT Senior Security Engineer to join the Security Compliance team in Bethesda, MD. This role focuses on implementing security controls, achieving FISMA compliance, and enabling secure cloud adoption across platforms.

The hands-on engineer collaborates with the ISSO and enterprise security teams across vulnerability management, cloud security, SIEM, and AI-enhanced tooling to strengthen the organization’s security posture and protect