Principal Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Principal Security Engineer assessing CSP architectures and authorization packages for FedRAMP compliance. Supporting Valiant Solutions’ federal cybersecurity and IT services for government customers.
Responsibilities:
- Provide technical expertise on security control implementations and develop information security procedures for systems and applications
- Perform pre-assessment activities, including detailed analysis of technology stacks comprising vendor solutions
- Assess vendor systems for technical compliance with NIST, FedRAMP, and agency standards
- Perform detailed architecture and technical design reviews across the full stack for vendor solutions
- Conduct architecture reviews of CSP authorization packages to validate secure design, FedRAMP and agency alignment, identify gaps, and advise on risk posture and compliance
- Lead architecture interviews with CSPs to ensure critical control areas meet program requirements
- Develop architecture briefing documents for the Government FedRAMP program manager and CISO
- Review and comment on CSP FedRAMP documentation, including system security plans, policies, procedures, supplemental guidance, alternative implementation, and risk acceptance documents
- Work with CSPs to reconcile documentation and technology gaps
- Review CSP assessments and package submissions after 3PAO audits and prepare package briefings
- Review vendor security assessment plans, security assessment reports, vulnerability scans, and penetration tests
- Provide security engineering services alongside the agency FedRAMP Lead
- Support Continuous Monitoring activities, including annual package submissions, significant change proposals, and risk acceptance documents
- Interpret FedRAMP and agency requirements and provide vendors with technical and process guidance
- Stay informed of updated FedRAMP guidance, industry best practices, emerging technologies, and Government cybersecurity directives
- Recommend impacts of updated guidance and technologies to the FedRAMP Government Lead
- Conduct security reviews of technologies for use within CSP authorization boundaries
- Manage relationships for assigned contractor-owned or contractor-operated systems and ensure vendor compliance with security and privacy requirements
- Assist stakeholders with IT security activities and project deadlines
- Ensure systems are operated, maintained, and disposed of in accordance with documented security policies and procedures, including Assessment & Authorization
- Research assigned IT security systems and provide architecture and security recommendations
Requirements:
- Five (5) years of experience in the IT Security field
- Bachelor’s degree in Computer Science, Information Systems, Mathematics, Engineering or a related field, OR an additional three years of IT experience required
- Direct experience as a Security Engineer or System Architect performing analysis on FedRAMP Cloud Service Providers (CSP) architectures and control implementations
- Four (4) years of hands-on technical experience as a System Architect or Security Engineer
- Four (4) years of experience supporting FedRAMP as an Engineer or Architect
- Security+, CISSP, CISM, CISA, or equivalent Security certification
- Confidence and depth of understanding to lead meetings with potential Vendors
- Current experience in reviewing 3rd party security assessment reports
- Detailed knowledge and experience with NIST Policies, Governance, Security Planning and Architecture, FISMA Compliance, RMF, Incident Analysis, and General Security Best Practices
- Strong written and oral communication skills
- Ability to communicate with technical and non-technical stakeholders, senior managers, junior staff, business unit customers, and public audiences
- Must be legally authorized to work in the United States
- Able to obtain and maintain a Public Trust clearance
- Quiet, distraction-free workspace with adequate internet for telework
- Full attention and availability during working hours and schedule alignment with coworkers and clients
- Disclosure of current or future outside employment and written approval for outside professional activities
Benefits:
- A choice of medical plans, from an affordable HSA option to a full-featured PPO, with generous company contributions
- Dental and vision coverage for you and your family
- Company-paid life, short-term disability, and long-term disability insurance
- Optional supplemental life, accident, and critical illness coverage
- 401(k) retirement plan with company match
- Paid time off that grows with years of service
- Paid federal holidays
- Paid certifications and professional development
- Valiant University training portal
- Flexible spending accounts
- Wellness and fitness program
- Referral bonuses
- Flexible remote work arrangement
- Reasonable accommodations for qualified individuals with disabilities
Similar Jobs
Senior Security Engineer, Product
Senior Security Engineer owning product and protocol security for Jito’s Solana market infrastructure. Building security tooling, monitoring, audits, and protections for crypto products.
Cybersecurity Engineer, Clearance Required
Cybersecurity Engineer securing Army cloud infrastructure and maintaining RMF authorization artifacts for LMI, a federal digital solutions provider. Integrating DoD controls, vulnerability management, and DevSecOps workflows.
Técnico Seguridad Perimetral
Administrador Oracle gestionando bases de datos corporativas para Logicalis Spain, empresa de centros de datos y soluciones tecnológicas. Instalación, migración, mantenimiento y soporte de entornos Oracle empresariales.
Técnico/a de Comunicaciones – Redes, Seguridad Perimetral, SD-WAN
Técnico de comunicaciones gestionando redes corporativas, seguridad perimetral y SD-WAN para The Whiteam Consulting. Integrando infraestructuras on-premise y cloud en proyectos tecnológicos.
Security Engineer II
Security Engineer securing information systems, data, and networks for a global organization. Conducting risk assessments, audits, incident investigations, and cybersecurity tool administration.
Senior Profesional Seguridad Física
Senior Physical Security Professional leading risk, security strategy, contracts, and public-force partnerships. PAR Servicios Integrales manages supplier services for the energy sector.
Senior Security Engineer
Senior Security Engineer building security foundations for Lumos’s autonomous identity platform. Designing authorization, threat modeling, cloud security, and vulnerability response for enterprise customers.
Senior Manager, Pre-Close Security
Senior cybersecurity deal lead assessing risks across Johnson & Johnson acquisitions, divestitures, and strategic transactions. Translating technical diligence into closing, Day 1, and post-close security decisions.
Senior Manager, Pre-Close Security
Senior cybersecurity deal lead guiding pre-close diligence for Johnson & Johnson healthcare transactions. Assessing cyber risks, advising deal decisions, and preparing Day 1 security handoffs.
Senior Security Engineer
Senior Security Engineer building Python-based automation, integrations, and AI/LLM workflows. Improving SOC operations for a software development client.
IT Cybersecurity Compliance Technical Associate – Campus 2027
Cybersecurity compliance associate supporting GRC workflows, risk assessments, control reviews, and audits at Guidehouse. Assisting U.S. business-hour escalations and compliance documentation.
Senior IT Security Engineer – Security Architecture, Operations
Senior IT Security Engineer developing security architecture and operations for Hypoport’s network of technology companies. Leading monitoring, incident response, tooling and automation.
Adjunct – IT/Cybersecurity
Adjunct instructor teaching IT and cybersecurity courses at Lackawanna College, a private Pennsylvania institution. Preparing course materials, supporting students, and reporting grades.
Cybersecurity Ops Analyst
Cybersecurity Ops Analyst monitoring and investigating threats for SAIC, a defense and mission technology integrator. Operating SIEM and EDR tools across a 24/7/365 security operations center.
Cybersecurity Operations Supervisor, 3rd Shift
Cybersecurity Operations Supervisor leading SAIC’s 24/7 enterprise security response team. Managing investigations, analysts, staffing, and continuous SOC improvements on third shift.
Security Architect
Security Architect designing and assuring secure systems for NEC Software Solutions. Supporting critical public-sector services through threat modelling, governance, and security architecture.
Senior Counsel – Data Governance, Privacy, Cybersecurity
Senior Counsel guiding Cencora’s healthcare services organization on data privacy, cybersecurity, AI, and governance. Advising on regulated health data, contracts, incident response, and technology-enabled offerings.
Adjunct Faculty, Cybersecurity for Leaders and Managers
Cybersecurity adjunct faculty teaching CSIA 300 asynchronously for University of Maryland Global Campus. Mentoring adult learners and supporting their academic and professional growth.
Adjunct Faculty – Microsoft 365 Endpoint Administration, Cybersecurity
Adjunct faculty teaching Microsoft 365 Endpoint Administration at UMGC, an online university serving nontraditional learners. Mentoring students through asynchronous, hands-on cybersecurity coursework.
Security Advisor II, Falcon Complete
Security Advisor guiding CrowdStrike Falcon Complete customers toward stronger security postures. Assessing Falcon environments, recommending remediation, and resolving customer issues.