Staff Security Engineer

Bixal

Staff Security Engineer embedding secure-by-design controls into Bixal’s federal agency platforms. Automating FedRAMP compliance, identity security, threat modeling, and audit evidence.

Posted 8/13/2026full-timeRemote • 🇺🇸 United StatesLead💰 $145,000 - $155,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing secure engineering practices, including identity, access, encryption, and data protection controls. Proven ability to align technical controls with regulatory requirements and reduce security risks through automation and monitoring.

Highest-signal resume keywords

Secure Engineering PracticesIdentity Federation (OIDC/SAML)Regulatory Compliance (NIST SP 800-53, FedRAMP)Automation and MonitoringVulnerability Remediation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat ModelingCode ScanningDependency ControlsVulnerability RemediationIdentity Access ControlsData Protection ControlsAudit Evidence AutomationPolicy-as-CodeTerraform Security ModulesCI/CD-Embedded Security Scanning

Soft Skills

LeadershipCollaborationProblem Solving

Tools & Technologies

SnykCodeQL

Certifications & Qualifications

Tier 4 High Risk Public Trust Clearance

Industry Keywords

FISMA Moderate ATO ProcessesFederal SystemsContinuous MonitoringPrivacy Compliance

Tech Stack

Tools & technologies

Terraform

About the role

Key responsibilities & impact

Design and implement secure-by-design controls, policy-as-code, and identity federation across the platform
Build audit-evidence automation to support continuous compliance and reduce manual audit burden
Lead threat modeling, code scanning, dependency controls, and vulnerability remediation efforts
Align technical controls and evidence collection to regulatory, privacy, and federal audit requirements, including NIST SP 800-53 and FedRAMP
Design and implement identity, access, encryption, and data protection controls in production systems
Reduce security risk through automation, monitoring, and preventive controls embedded directly in delivery workflows
Act as an engineering partner who ships fixes and enables teams to move fast safely
Collaborate with ISSOs/ISSEs and the Platform Enablement team on ATO and continuous monitoring activities
Perform other relevant duties as qualified and trained

Requirements

What you’ll need

Bachelor's degree and at least 8 years of related experience, or an equivalent combination of education and experience
Demonstrated leadership building secure engineering practices, including threat modeling, code scanning, dependency controls, and vulnerability remediation
Experience aligning technical controls and evidence collection to regulatory, privacy, and audit requirements
Proven ability to design and implement identity, access, encryption, and data protection controls in production systems
Hands-on track record reducing security risk through automation, monitoring, and preventive controls embedded in delivery workflows
Experience supporting FISMA Moderate or higher ATO processes for federal systems
Must be able to obtain and maintain a Tier 4 High Risk Public Trust clearance
Familiarity with policy-as-code tooling, Terraform security modules, and CI/CD-embedded security scanning (e.g., Snyk, CodeQL) is nice to have
Experience with identity federation (OIDC/SAML) in federal environments is nice to have
Prior experience supporting federal financial-data systems is nice to have
Must be legally authorized to work in the US
Bixal does not provide visa sponsorship

Benefits

Comp & perks

Flex hours
401K with matching incentive
Parental Leave
Medical/dental/vision benefits
Flex Spending Account
Company provided short-term disability and life insurance
Commuter benefits
Paid Time Off (PTO)
11 Paid holidays
Reasonable accommodation to participate in the job application or interview process, perform essential job functions, and receive other benefits and privileges of employment