Lead Security Engineer

What this role involves

Lead Security Engineer for a large-scale cloud-native federal modernization program. Responsible for embedding application security into the SDLC using DevSecOps and Zero Trust principles. Directs ATO activities, security testing, threat modeling, and interfaces with Government stakeholders.

Skills this posting asks for

• application security
• devsecops
• zero trust
• authorization to operate
• sast
• dast
• threat modeling
• vulnerability remediation
• cloud security
• ci/cd
• sbom
• sdcl
• system of systems
• security testing
• penetration testing
• risk management
• compliance
• nist frameworks
• government stakeholder management

Requirements

• Level: lead
• Remote policy: onsite
• Visa sponsorship: no

From the employer’s posting

Lead Security Engineer, #1073 Security Requirement: U.S. Citizenship required&nbsp; Work Location:&nbsp;Suitland, MD&nbsp; We are seeking a Subject Matter Expert (SME)–level&nbsp;<span data-…