Senior Security Engineer: FedRAMP & ATO Expert

Tria Federal; Woodlawn (MD); On-site; USD 120,000 - 180,000; Full time

Job summary

Tria Federal is seeking a Senior Security Engineer to advance application modernization and maintain FedRAMP/ATO processes. You’ll work on security ops including monitoring, vulnerability management, and risk assessment across multiple projects, using tools like Nessus, Burp Suite, and Splunk.

The role requires a US clearance or eligibility, a strong background in NIST 800-53 controls, AWS security, and hands-on experience with security infrastructure and incident response.

Qualifications

• U.S. Federal Position of Trust clearance or ability to obtain one.
• Residency in the United States and the ability to work onsite in the DMV/Baltimore area.
• Bachelor’s degree in cybersecurity, CS, engineering or related field.
• Experience as a system or information security engineer with familiarity of NIST 800-53 and FedRAMP.

Responsibilities

• Engineer, implement, and monitor security measures for computer systems and networks.
• Define system security requirements and design secure architectures.
• Develop SOPs and protocols for security operations and incident response.
• Configure, troubleshoot, and maintain security infrastructure devices.
• Develop tools to mitigate vulnerabilities and automate repetitive tasks.
• Maintain ATO artifacts (SSP, CP, ISRA, PIA) and support ACT testing.

Skills

FedRAMP

AWS

NIST-800-53

Vulnerability mgmt

Incident response

Education

Bachelor's degree

Tools

Nessus

Burp Suite

ZAP

OWASP

Splunk

AppOmni

AWS

Job description

Tria Federal is seeking a Senior Security Engineer to advance application modernization and maintain FedRAMP/ATO processes. You’ll work on security ops including monitoring, vulnerability management, and risk assessment across multiple projects, using tools like Nessus, Burp Suite, and Splunk.

The role requires a US clearance or eligibility, a strong background in NIST 800-53 controls, AWS security, and hands-on experience with security infrastructure and incident response.