Staff Federal Security & Compliance Engineer

CLEAR; New York (NY); On-site; USD 190,000 - 230,000; Full time

Benefits offered by this job

Comprehensive healthcare plans

Flexible time off

401(k) retirement plan with employer match

Job summary

A leading security solutions provider is seeking a Federal Security & Compliance Engineer in New York, NY. This role focuses on enhancing security and compliance throughout the product lifecycle. The ideal candidate has over 8 years of experience as a Security Engineer and expertise in AWS, Kubernetes, and Docker. You will collaborate with engineering teams, lead security initiatives, and ensure compliance with industry standards. Comprehensive benefits include healthcare, flexible time off, and a competitive salary ranging from $190,000 to $230,000.

Qualifications

• 8+ years as a Security Engineer with expertise across the SDLC.
• Skilled in identifying web/mobile vulnerabilities and implementing enterprise security controls.
• Strong communicator with analytical, organizational, and project management abilities.

Responsibilities

• Collaborate with teams to define security requirements early in development.
• Create threat models, testing plans, and remediation strategies.
• Lead penetration testing efforts with internal teams or vendors.

Skills

Security Engineering expertise

Awareness of web/mobile vulnerabilities

AWS

Kubernetes

Docker

Analytical skills

Tools

AWS

Kubernetes

Docker

Job description

Staff Federal Security & Compliance Engineer

AWS Security Engineer SDLC Compliance NIST 800-53

We are seeking a Federal Security & Compliance Engineer to enhance the security and compliance of our products throughout their lifecycle, from design to deployment. You will play a key role in building a platform that interconnects attributes and qualifications while prioritizing member privacy and security.

What you\'ll do:

• Collaborate with engineering and product teams to define and embed security and compliance requirements early in development.
• Create threat models, testing plans, and validation strategies to ensure secure, high-quality product delivery.
• Review code, infrastructure, and architecture to identify and remediate security flaws, including business-specific risks.
• Lead penetration testing efforts with internal teams or vendors.
• Support security audits, ensuring compliance with industry standards (NIST 800-53 Rev. 5).
• Bridge communication between engineering and Security to promote alignment and a security-first culture.
• Provide backup support to the ISSO and assist in broader security management and compliance activities.
• Serve as a secondary cybersecurity POC for the SOC, aiding incident response and investigations.
• Manage and remediate security weaknesses through the POA&M process.

What you\'re great at:

• 8+ years as a Security Engineer with expertise across the SDLC.
• Skilled in identifying web/mobile vulnerabilities and implementing enterprise security controls.
• Hands-on experience with AWS, Kubernetes, Docker, and strong knowledge of networking and OS internals.
• Strong communicator with excellent analytical, organizational, and project management abilities.
• Experienced in regulatory frameworks (NIST 800-53, PCI DSS, FedRAMP) and identity assurance standards (IAL2, AAL2).
• Comfortable working independently and driving complex security initiatives to completion.

Benefits:
We offer holistic total rewards, including comprehensive healthcare plans, family-building benefits, flexible time off, annual wellness stipend, free OneMedical memberships for you and your dependents, a CLEAR Plus membership, and a 401(k) retirement plan with employer match. The base salary range for this role is $190,000 - $230,000, depending on levels of skills and experience.

How to Apply

Interested in this position? Please submit your resume and cover letter through the application portal.

Plaid inc 270 Lafayette St, New York, NY 10012, USA