Senior Security Engineer — Cloud, Compliance & AI Tools

AUGUST SCHELL ENTERPRISES, INC.; Bethesda, Northern (MD, KY); Hybrid; USD 150,000 - 210,000; Full time

Job summary

National Library of Medicine in Bethesda, MD seeks an IT Senior Security Engineer to join the Security Compliance team. The role focuses on implementing security controls, ensuring FISMA compliance, and supporting secure cloud adoption across on‑prem and cloud platforms.

Collaborating with the ISSO and security teams, you will drive vulnerability management, SIEM operations (Splunk/Tenable), threat modeling, and AI‑enabled tooling to strengthen overall security.

Qualifications

• Extensive experience securing on‑premises and cloud environments (AWS, GCP, Azure) with hands‑on security engineering in federal settings.
• 10+ years in IT security, 7+ years in engineering with 3+ years cloud security and endpoints administration.
• Experience with AI/ML integration in security tooling.
• Expertise with federal compliance frameworks (FISMA, NIST 800‑53, FedRAMP, RMF) and ATO/POA&M processes.
• Experience with security tools such as Tenable, Checkmarx, or Splunk; vulnerability management workflows.
• Bachelor’s degree or equivalent; CISSP certification within 6 months.
• Strong collaboration and communication across multi‑discipline teams.

Responsibilities

• Enhance and automate security checks; evaluate AI capabilities to improve coverage.
• Implement and maintain security controls for on‑prem and cloud environments (AWS, GCP, Azure).
• Support identity access, vulnerability management, encryption, network segmentation, and log management.
• Integrate and optimize SIEM solutions (Splunk) for monitoring and compliance in hybrid environments.
• Conduct threat modeling and security assessments of cloud deployments.
• Provide security guidance to developers and operations teams; promote security awareness.
• Analyze vulnerability data to identify systemic risks and remediation opportunities.
• Contribute to documentation and SOPs to support the security program.

Skills

Security engineering

Cloud security

FISMA compliance

NIST 800-53

Splunk

Tenable

Checkmarx

CISSP

Scripting (Python/PowerShell/Bash)

Vulnerability management

Documentation

Education

Bachelor’s degree in computer science, cybersecurity, IT, or related field

Tools

Splunk

Tenable

Checkmarx

AWS

Azure

GCP

Job description

National Library of Medicine in Bethesda, MD seeks an IT Senior Security Engineer to join the Security Compliance team. The role focuses on implementing security controls, ensuring FISMA compliance, and supporting secure cloud adoption across on‑prem and cloud platforms.

Collaborating with the ISSO and security teams, you will drive vulnerability management, SIEM operations (Splunk/Tenable), threat modeling, and AI‑enabled tooling to strengthen overall security.