Senior Security Engineer: Cloud & Federal Compliance

Peyton Resource Group; Bethesda (MD); On-site; USD 130,000 - 180,000; Full time

Job summary

Peyton Resource Group is seeking a Senior Security Engineer to join a multidisciplinary cybersecurity team supporting mission-critical systems in a regulated federal environment. You will implement and optimize security controls across on‑prem and multi‑cloud environments while ensuring compliance with FISMA, NIST 800‑53, FedRAMP, and RMF.

The ideal candidate has 10+ years in information security, 3+ years cloud security, strong Linux/Windows administration, and experience with Splunk, Tenable,

Qualifications

• 10+ years of information security experience, including 7+ years in hands‑on security engineering roles.
• Minimum 3 years of experience securing cloud environments (AWS, Azure, and/or GCP).
• Strong background in Linux and Windows administration with a foundation in systems engineering or systems administration.
• Experience implementing security controls in hybrid cloud and on‑premises environments.
• Working knowledge of federal security frameworks including FISMA, NIST 800‑53, FedRAMP, RMF, ATO, and POA&M processes.
• Experience with enterprise security tools such as Splunk, Tenable, Checkmarx, or similar technologies.
• Understanding of vulnerability management, application security testing, remediation workflows, identity and access management, encryption, and centralized logging.
• Experience utilizing scripting or automation tools such as PowerShell, Python, Bash, or APIs.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience).
• CISSP certification or ability to obtain within six months of hire.
• Excellent communication and collaboration skills with both technical and non‑technical stakeholders.

Responsibilities

• Implement and maintain security controls across on‑premises and cloud platforms (AWS, Azure, GCP).
• Support compliance initiatives related to FISMA, NIST 800‑53, FedRAMP, RMF, ATOs, and POA&M management.
• Enhance and automate security assessments, compliance monitoring, and remediation activities.
• Evaluate and integrate AI/ML and LLM‑based capabilities to improve threat detection and remediation.
• Administer and optimize security technologies such as SIEM, vulnerability management, and centralized logging platforms.
• Support security monitoring, event correlation, incident investigation, and continuous compliance reporting (Splunk/Tenable).
• Conduct cloud security reviews, threat modeling, and vulnerability assessments for deployments.
• Collaborate with system admins, developers, and infra teams to remediate security risks.
• Provide security guidance across server, workstation, network, and cloud environments.
• Develop and maintain security documentation, procedures, standards, and operational guidance.

Skills

Cloud security

Vulnerability management

SIEM operations

Application security

AI-driven security

Automation scripting

Communication

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field

CISSP certification

Master's degree in Cybersecurity, CS, IT

Tools

Splunk

Tenable

Checkmarx

Docker

Kubernetes

PowerShell

Python

Bash

Job description

Peyton Resource Group is seeking a Senior Security Engineer to join a multidisciplinary cybersecurity team supporting mission-critical systems in a regulated federal environment. You will implement and optimize security controls across on‑prem and multi‑cloud environments while ensuring compliance with FISMA, NIST 800‑53, FedRAMP, and RMF.

The ideal candidate has 10+ years in information security, 3+ years cloud security, strong Linux/Windows administration, and experience with Splunk, Tenable,