Security Engineer

• Lead all facility-related responsibilities and security operations across the organization
• Oversee facility management, leasing, and compliance
• Manage personnel clearances, secure facilities, and physical security programs
• Ensure compliance with all government security requirements and regulations
• Conduct regular security assessments and implement improvements

Facility Security Officer

• Support security control assessment activities
• Gather and organize assessment evidence
• Document security control implementation
• Conduct security testing and evaluations
• Assist with vulnerability scans and analysis
• Create of assessment reports and briefings
• Maintain assessment documentation and tracking sheets
• Lead security control interviews
• Prepare assessment deliverables
• Applying NIST security controls and frameworks
• Support continuous monitoring activities
• Assist with security documentation review
• Contribute to Plans of Action and Milestones (POA&Ms) development
• Participate in team meetings and technical discussions

Security Control Assessor

• Lead onboarding and migration of applications onto Akamai CDN and WAF platforms.
• Configure, maintain, and support Akamai edge security and content delivery services.
• Implement and tune WAF policies, security controls, caching rules, and traffic management configurations.
• Work closely with application, network, cloud, and security teams to ensure secure and optimized application delivery.
• Troubleshoot complex Layer 1–7 issues involving DNS, TLS/SSL, HTTP/HTTPS, CDN behavior, caching, and origin connectivity.
• Support production incidents, root cause analysis, and operational escalations.
• Participate in on-call rotation and support maintenance activities during off-hour change windows.
• Develop technical documentation, runbooks, operational procedures, and audit artifacts.
• Collaborate with vendors and internal stakeholders on application onboarding and security initiatives.
• Support security assessments, audits, remediation activities, and compliance requirements.
• Provide technical guidance and mentoring to engineering teams.

WAF/CDN Security Architect

• Provide direct, hands-on support for the daily administration and execution of the Special Access Program (SAP) security program
• Execute critical security functions across all security disciplines to ensure compliance and protect sensitive program information
• Create a secure environment by coordinating with relevant authorities to protect SAP information
• Take responsibility for security management, including the Security, Education, Training, and Awareness (SETA) program
• Implement and execute all SAP security requirements as defined
• Develop, coordinate, maintain and execute Security Standard Operating Procedures for the SAPF/SCIF
• Process Program Access Requests (PARs), facilitate indoctrinations and debriefings, and maintain personnel security files
• Manage visit certifications and foreign travel reporting for all SAP-accessed personnel

Contractor SAP Security Officer – CSSO

• Maintain and enhance security related tooling with the team including Security Log Aggregation, AV, Development Buildtime and Cloud Runtime tooling.
• Automate detections throughout our tooling stack leveraged to uncover security events and attacks against our systems.
• Implement, iterate, and operate security automation aimed at supporting our engineers during their building processes, reducing the time it takes to remediate discovered vulnerabilities.
• Perform vulnerability assessments and ad hoc security reviews to identify and prioritize potential security risks and vulnerabilities
• Partner closely with engineers to perform security reviews that support our software and infrastructure engineers early in their engineering process
• Participate in incident response activities, including investigation, containment, and recovery efforts

Security Engineer II

• Own and execute Slingshot’s cybersecurity strategy across enterprise, product, and operational environments.
• Lead readiness and implementation for CMMC, NIST SP 800-171, DFARS, and related government cybersecurity requirements.
• Establish and scale secure software development lifecycle (SDLC), application security, and DevSecOps practices.
• Design and oversee cloud security architecture across AWS/Azure/GovCloud environments.
• Drive audit readiness, including System Security Plans (SSPs), POA&Ms, and continuous monitoring programs.
• Partner with Product and Engineering to embed security into development without slowing delivery velocity. Build and operate security monitoring, detection, vulnerability management, and incident response capabilities.
• Lead executive-level incident response, including customer communication and regulatory reporting.
• Develop and enforce identity, access management, data protection, and logging strategies across systems.
• Oversee third-party/vendor risk management and supply chain security, including flowdown requirements.
• Partner with the Facility Security Officer (FSO) on classified programs, insider threat initiatives, and industrial security requirements.
• Ensure secure handling of CUI/FCI and readiness for customer audits and security questionnaires.
• Define and communicate cyber risk to executive leadership, board members, and customers.
• Support business development by enabling compliance required to win and execute government contracts.
• Build and scale a lean, high-performing security team aligned to company growth.

Chief Information Security Officer (CISO)

• Display a strong background in security operations, threat detection, and security engineering
• Be responsible for key contributions in developing Threat Defense Solutions, focusing on detection, automation, and development of artificial intelligence (AI) capabilities
• Work with in-house teams to identify the right mix of tools, techniques, and procedures to translate your customers’ needs and future goals into a plan that will enable secure and effective solutions
• Take a critical approach to solution design, identifying gaps, providing alternatives, and customizing solutions to maintain a balance of security and business needs
• Create technical solutions to identify security threats, enhance detection capabilities, and drive improvement in response efforts

Security Automated Response Engineer

• develop a breakthrough idea or solution for our customer's most pressing problems
• receive mentorship from senior leaders
• solve problems using Booz Allen’s products
• leverage the power of collaboration in a team environment
• culminate with a final Challenge Cup competition and presentation to senior leadership

Cybersecurity Intern

• Work with DoD to develop a reliable, secure network
• Collaborate with SMEs, customers, and vendors
• Design and test new boundary security capabilities
• Provide implementation teams with remote network firewall support
• Identify and support security requirements for switched and routed networks
• Contribute to new principles and concepts development

Boundary Security Engineer

• Identify business-critical risks present within Instacart’s product and infrastructure.
• Analyze the risks and define remediation strategies with actionable roadmaps.
• Develop scalable systems to enable and encourage secure engineering patterns.
• Own and drive systemic improvements across engineering and other functions.
• Coach and mentor other engineers within the organization.

Senior Security Engineer – Cloud, AI, Product Security

• Maintain the appropriate operational security posture for assigned Information Systems (IS) and networks in accordance with cybersecurity policies, directives, and Information Assurance (IA) Standard Operating Procedures (SOP).
• Ensure the Confidentiality, Integrity, and Accessibility of all IS resources, organic to the supported organization, maintain a high level of operational availability.
• Serve as the principle technical advisor to the Information Systems Security Managers (ISSM), Program Security Officers (PSO), and Delegated Authorizing Officials (DAO).
• Perform functional duties, as the alternate ISSM, to maximize operational readiness and effectiveness.
• Provide expertise, to maintain the Authority to Operate (ATO) and Authorization to Connect (ATC) for assigned IS, ensuring Risk Management Framework (RMF) compliance.
• Provide support to Program Management Offices (PMOs), by conducting site surveys and providing technical information, to develop RMF artifacts to support ATO/ATC and to facilitate IS deployments and successful integration.
• Perform IS lifecycle management to facilitate requirements engineering, procurement, integration, operational sustainment, and destruction.
• Provide the organization, subject matter expertise to prepare for cybersecurity, physical and personnel security assessments from senior management.
• Perform cybersecurity assessments for IS, within your area of responsibility, on a regular and consistent basis to identify potential vulnerabilities, evaluate the effectiveness of existing security controls, and ensure compliance with relevant policies and regulations.
• Develop supporting documentation, such as Plan of Action and Milestones (POA&M) and inspection reports, to coordinate events, capture discrepancies, and document remediation strategy for supported organizations.
• Develop and integrate policy and procedures to reinforce Access Controls (AC) for identified vulnerabilities.
• Participate in professional engagements with supporting and supported organizations, for successful collaboration, and to ensure assigned projects deliver desired results.
• Develop and maintain IS documentation to capture changes to the system, its operating environment, and to advice the Configuration Control Board (CCB) on ATO/ATC conflicts.
• Conduct cybersecurity audits and maintain audit record management, ensuring audit records are collected, reviewed, documented, and archived.
• Complete necessary, initial/annual, training to establish and maintain access to supported systems and networks.

Information Systems Security Officer, Mid

• Team Leadership & Development: Mentoring, and growing security engineers. This includes running 1:1s, career development planning, performance reviews, and building a culture of continuous learning around evolving threats and technologies.
• Security Execution: Partnering with engineers on your team and the Sr. Director of Security and Integrity you’ll define and prioritize the team's quarterly and annual security initiatives, aligning them with business objectives and frameworks like NIST CSF, CIS Controls, or SOC 2. Translating risk assessments into actionable engineering work.
• Cross-Functional Collaboration: Partnering with Platform, SRE, Legal, IT, Compliance, and Product teams to embed security into the SDLC, incident response processes, and vendor management workflows.
• Incident Response & Preparedness: You’ll help the team to maintain the Security incident response program: runbooks, running tabletop exercises, on call schedules, and ensuring timely response to alerts and events.
• Product and Cloud Security: Drive product security practices and cloud security posture across our AWS infrastructure, ensuring secure architecture, configuration, and continuous monitoring of our production environments.
• Vulnerability & Risk Management: Overseeing application security testing (SAST, DAST, SCA), penetration testing programs (including bug bounty), and ensuring vulnerabilities are triaged, prioritized, and remediated within SLA.
• Corporate Security: Partnering with IT, you and the team will help ensure strong protections in corporate security including spam, EDR, and device security is mature and well executed.
• Vendor & Third-Party Risk: Helping the team evaluating security vendors, and overseeing third-party risk assessments.
• Budget & Resource Planning: In coordination with the other department managers; manage the security budget, justifying tooling spend, headcount requests.

See all jobs on JobTailor