Security Engineer

🕒 Outubro 15

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $130.000 - $140.000 / ano

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 12%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Bixal

SiteLinkedInTodas as Vagas

51 - 200 funcionários

Fundada em 2001

📣 Marketing

📦 Logística

🏥 Saúde

Marketing • Logistics • Healthcare

A Bixal é uma empresa de serviços digitais orientada por missão que faz parcerias com governos e organizações líderes para desenhar e entregar transformações digitais baseadas em dados e centradas no ser humano. A empresa combina tecnologia, comunicação, dados e design para construir experiências digitais para clientes, soluções modernas de software e treinamento/assistência técnica que melhoram os resultados do setor público e o impacto organizacional.

Descrição

• Serve as security lead for a FIPS 199 Moderate federal platform supporting governmentwide regulatory planning and review • Protect and maintain availability of legacy and modernized platforms • Harden, patch, and maintain compliance for Java, Oracle, Red Hat, Apache/Tomcat, and related application components • Run vulnerability scans and lead remediation and patching • Meet contractual remediation timelines and document POA&Ms when timelines cannot be met • Harden systems against GSA security benchmarks and CIS Level 1 guidelines • Track end-of-life software, unsupported libraries, and known vulnerabilities • Support continuous monitoring, log review, incident response, COOP, and disaster recovery planning and testing • Maintain the assessment and authorization package under NIST SP 800-37 and SP 800-53 Rev. 5 • Maintain POA&Ms and support government-led security assessments, control reviews, and penetration testing • Support privacy compliance artifacts, including Privacy Threshold Assessments and Privacy Impact Assessments • Perform threat modeling for new features, integrations, and architecture decisions • Embed static and dynamic security testing, such as Snyk and OWASP ZAP, into CI/CD pipelines • Review releases for security impact before production • Advise on secure architecture, federated identity, FIPS 140-validated encryption, Zero Trust, and software supply chain security • Prepare security packages for prototype testing and position the platform for an ATO • Provide guidance on PKI, firewall and network security, internet protocols, and configuration management • Serve as the client's security point of contact and brief technical leads and the Project Manager • Coordinate infrastructure changes with client IT teams and validate system security • Perform other relevant assigned duties

🎯 Requisitos

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field • At least 5 years of hands-on information security experience, including securing federal information systems under FISMA • Hands-on experience with the NIST Risk Management Framework, including implementing and assessing NIST SP 800-53 Rev. 5 controls at the Moderate baseline • Experience writing and maintaining A&A documentation, including System Security Plans, contingency plans, incident response plans, and POA&Ms, and supporting a system through ATO • Experience running vulnerability scanning tools such as Tenable/Nessus or Qualys • Experience hardening Linux, preferably Red Hat Enterprise Linux, servers and relational databases, preferably Oracle, against CIS or agency benchmarks • Working knowledge of application security, including the OWASP Top 10 and ASVS, static and dynamic testing tools, and securing CI/CD pipelines • Familiarity with public key infrastructure, TLS certificate management, firewall configuration, and network protocols • Clear, confident communication skills, with the ability to explain risk and trade-offs to technical and non-technical stakeholders, including client leadership • Ability to obtain and maintain a favorable Public Trust determination in support of a federal government contract • Legally authorized to work in the US • Security certifications such as CISSP, CISM, CompTIA Security+, or equivalent are nice to have • Experience with GSA IT security policies, procedural guides, or the GSA ATO process is nice to have • Experience securing cloud-hosted or containerized platforms, including AWS, cloud.gov, Docker, or Kubernetes, is nice to have • Familiarity with Zero Trust architecture, NIST SSDF, OMB M-22-18, identity federation, single sign-on, Login.gov, monitoring and logging tools, and legacy-to-modern platform migration is nice to have

🏖️ Benefícios

• Flex hours • 401K with matching incentive • Parental Leave • Medical/dental/vision benefits • Flex Spending Account • Company provided short-term disability and life insurance • Commuter benefits • Paid Time Off (PTO) • 11 Paid holidays • Reasonable accommodation for applicants with disabilities • Professional journey support and future opportunities

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo