Sr. Security Engineer

Procurement Sciences Inc; Lehi, Northern (UT, KY); Hybrid; USD 125,000 - 180,000; Full time

Benefits offered by this job

Stock options

Flexible work arrangements (remote)

Professional development

Performance-based incentive plan

Health plan

Job summary

Procurement Sciences is seeking an experienced Security Engineer to own the engineering side of security across the platform, including vulnerability management, application security, AI/LLM security, and cloud hardening. This role reports to the CISO and collaborates with Platform Engineering, Product, and DevOps.

You will protect sensitive government contracting data with FedRAMP Moderate authorization. Security is a differentiator here, designed to accelerate engineering velocity while

Qualifications

• 5+ years of hands-on security engineering with depth in at least three areas such as vulnerability management, AppSec, cloud security, automation, and detection.
• Strong cloud-native security experience (Azure and/or GCP) with Kubernetes and IaC security.
• Experience operating vulnerability scanners (SAST/DAST/SCA), CSPM/CWPP, EDR, and secret scanning.
• Ability to build automation with Python/Go/TypeScript or Bash and communicate clearly with developers and customers.
• US citizenship is required for FedRAMP and defense customers.

Responsibilities

• Own end-to-end vulnerability management, including pen tests, CSPM/CWPP tooling, MTTR, and risk reporting.
• Lead application security activities: SAST, DAST, SCA, secret scanning, threat modeling, secure code review, and developer training.
• Oversee AI/LLM security across model integrations, providers, and data pipelines.
• Secure cloud/infrastructure (Azure/GCP) under FedRAMP and GCC High: IAM, network segmentation, encryption, Kubernetes runtime protection, IaC scanning, WAF, zero-trust.
• Drive security automation: CI/CD gates, detection-as-code, SOAR, and compliance evidence collection for SOC 2, FedRAMP, and CMMC.
• Coordinate detection and response across endpoints, cloud, and apps; support IR planning.
• Map technical controls to NIST 800-53, SSPs/POA&Ms, and customer security assessments.

Skills

Security engineering

Cloud security

Vulnerability management

Application security

Automation tooling

Python

Go

TypeScript

Bash

Tools

Wiz

SentinelOne

SIEM

Job description

Company Overview

Procurement Sciences is at the forefront of transforming the multi-billion-dollar government contracting industry with Awarded AI, our cutting-edge platform designed to help businesses excel in government sales. We simplify complex processes, drive revenue growth, and deliver real cost savings through unmatched efficiency. As a leading venture-backed SaaS company founded by seasoned GovCon experts, we are not just participants in the AI revolution; we are shaping it by solving the industry’s toughest challenges. Our “One Team, One Fight” culture values creativity, accountability, and forward-thinking, and we invite driven builders and innovators to help us develop high-performing teams. Ranked among the top 10 percent of fastest-growing SaaS companies and on a clear path to becoming a unicorn, we are seeking top talent to join our early team and play a key role in building the next great AI software company.

At Procurement Sciences, innovation is more than a buzzword; it's in our DNA, where AI serves as a playground for challenging norms and shaping the future of GovCon. If you’re ready to join a team that’s reshaping the industry landscape, leading in AI, and on the path to becoming the next unicorn, Procurement Sciences is your new home. Join us on our mission to democratize government contracting success and shape the future of this vital sector.

About the Role

You'll be the technical backbone of our security program. This is a hands-on role owning the engineering side of security across the whole platform: vulnerability management, application security, AI/LLM security, cloud hardening, detection, and automation. You'll report to the CISO and work closely with Platform Engineering, Product, and DevOps.

We process sensitive government contracting data for defense and civilian agencies and hold FedRAMP Moderate authorization. Security is a product differentiator here, not a cost center. Your job is to keep that posture strong without slowing engineering down.

What You’ll Own

• Vulnerability management end to end, including pen tests, CSPM/CWPP tooling (Wiz), MTTR, and risk reporting for leadership and customers.

• Application security: SAST, DAST, SCA, secret scanning, threat modeling, secure code review, and developer training. You're the person engineers come to with security questions.

• AI/LLM security across our model integrations, RAG pipelines, and LLM provider APIs (Anthropic, Google Vertex AI, OpenAI). Prompt injection, data exfiltration, model abuse, output guardrails, and evaluating new AI features before they ship.

• Cloud and infrastructure security in Azure/AKS and GCP under FedRAMP and GCC High requirements: IAM, network segmentation, encryption, Kubernetes runtime protection, IaC scanning, WAF, and zero-trust design with the DevOps team.

• Security automation: CI/CD security gates, detection-as-code, SOAR, custom tooling, and automated compliance evidence collection for SOC 2, FedRAMP, and CMMC.

• Detection and response across endpoints (SentinelOne), cloud, and application layers. Lead or support incident response and keep the IR plan current.

• Compliance and customer trust: technical controls mapped to NIST 800-53, SSPs and POA&Ms, continuous monitoring, and clear technical answers to customer security assessments.

What we're looking for

Required:

• 5+ years of hands-on security engineering with depth in at least three of: vulnerability management, AppSec, cloud security, security automation, detection engineering.

• Strong cloud-native security experience (Azure and/or GCP preferred), including Kubernetes, container hardening, and IaC security.

• Proven experience operating vulnerability scanners, SAST/DAST/SCA, CSPM/CWPP, EDR, SIEM, and secret scanning.

• Enough Python, Go, TypeScript, or Bash to build automation and custom tooling.

• Clear communication with developers and customers alike.

• US citizenship (required for FedRAMP and defense customers).

Preferred:

• Experience securing AI/ML systems and LLM applications (OWASP Top 10 for LLM, MITRE ATLAS).

• SaaS security background at a B2B or GovTech company.

• Working knowledge of FedRAMP, CMMC, NIST 800-53, NIST 800-171, and SOC 2, and how technical controls map to them.

• FedRAMP or CMMC assessment support from the engineering side.

• GCC High, Azure Government, or AWS GovCloud experience.

• Familiarity with DFARS 252.204-7012, CUI handling, and ITAR/EAR.

• Certifications such as OSCP, GIAC, cloud security certs, or CISSP.

• Prior founding or early security hire at a startup.

Who you are

A builder, not just an auditor. Comfortable making judgment calls without perfect information. An owner who sees a gap, flags it, and fixes it. Pragmatic about risk, with a default of 'Yes, and here's what we need to do first.' Someone who earns trust by being helpful, direct, and reliable.

Compensation and Benefits:

• Compensation DOE.

• Competitive salary with performance based incentive plan and stock options in a rapidly growing, venture-backed company.

• Comprehensive health plan, ensuring you and your loved ones are well taken care of.

• Flexible work arrangements, including full remote work capabilities, to balance your professional and personal life.

• Extensive professional development opportunities, providing a fast track for career advancement.

Notice: Background Check Required

As part of our employment process, a background check is required. The background check may include a review of your credit history, criminal records, and employment verification, among other items. This check is conducted in compliance with the Fair Credit Reporting Act (FCRA). By applying for this position, you acknowledge and consent to this process.

Procurement Sciences is an equal opportunity employer and is committed to a diverse and inclusive workplace. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. We encourage candidates from all backgrounds to apply