Security Engineer

Job not on LinkedIn

🔥 8 minutes ago

🇺🇸 United States – Remote

💵 $130k - $140k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Bixal

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2001

📣 Marketing

📦 Logistics

🏥 Healthcare

Marketing • Logistics • Healthcare

Bixal is a mission-driven digital services firm that partners with governments and leading organizations to design and deliver data-driven, human-centered digital transformations. The company combines technology, communications, data, and design to build digital customer experiences, modern software solutions, and training/technical assistance that improve public-sector outcomes and organizational impact.

📋 Description

• Serve as security lead for a FIPS 199 Moderate federal platform supporting governmentwide regulatory planning and review • Protect and maintain availability of legacy and modernized platforms • Harden, patch, and maintain compliance for Java, Oracle, and Red Hat environments • Run vulnerability scans and lead remediation and patching across Red Hat Enterprise Linux, Oracle, Apache/Tomcat, and Java application components • Meet contractual remediation timelines and document POA&Ms when timelines cannot be met • Harden systems against GSA security benchmarks and CIS Level 1 guidelines • Track end-of-life software, unsupported libraries, and known vulnerabilities; raise risks with recommended paths forward • Support continuous monitoring, log review, incident response, COOP, and disaster recovery planning and testing • Maintain the A&A package under NIST SP 800-37 and SP 800-53 Rev. 5 • Maintain POA&Ms and support government-led security assessments, control reviews, and penetration testing • Support privacy compliance artifacts, including Privacy Threshold Assessments and Privacy Impact Assessments • Perform threat modeling for new features, integrations, and architecture decisions • Embed static and dynamic security testing, such as Snyk and OWASP ZAP, in CI/CD pipelines • Review releases for security impact before production • Advise on secure architecture, federated identity, FIPS 140-validated encryption, Zero Trust principles, and software supply chain security • Prepare security packages for prototype testing and position the new platform for an ATO • Provide guidance on PKI, firewall and network security, internet protocols, and configuration management • Serve as the client's security point of contact and brief technical leads and the Project Manager • Coordinate with client IT teams on infrastructure changes and validate system security • Perform other relevant duties as assigned and qualified/trained to perform

🎯 Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field • At least 5 years of hands-on information security experience, including securing federal information systems under FISMA • Hands-on experience with the NIST Risk Management Framework, including implementing and assessing NIST SP 800-53 Rev. 5 controls at the Moderate baseline • Experience writing and maintaining A&A documentation, including System Security Plans, contingency plans, incident response plans, and POA&Ms, and supporting a system through ATO • Experience running vulnerability scanning tools such as Tenable/Nessus or Qualys • Experience hardening Linux, preferably Red Hat Enterprise Linux, servers and relational databases, preferably Oracle, against CIS or agency benchmarks • Working knowledge of application security, including the OWASP Top 10 and ASVS, static and dynamic testing tools, and securing CI/CD pipelines • Familiarity with public key infrastructure, TLS certificate management, firewall configuration, and network protocols • Clear, confident communication skills, with the ability to explain risk and trade-offs to technical and non-technical stakeholders, including client leadership • Ability to obtain and maintain a favorable Public Trust determination in support of a federal government contract • Must be legally authorized to work in the US • Bixal does not provide visa sponsorship • Security certifications such as CISSP, CISM, CompTIA Security+, or equivalent are nice to have • Experience with GSA IT security policies, cloud-hosted or containerized platforms, Zero Trust architecture, identity federation, monitoring/logging tools, and legacy-to-modern platform migration are nice to have

🏖️ Benefits

• Flex hours • 401K with matching incentive • Parental Leave • Medical/dental/vision benefits • Flex Spending Account • Company provided short-term disability and life insurance • Commuter benefits • Paid Time Off (PTO) • 11 Paid holidays • Reasonable accommodation for disabilities • Professional journey support and inclusive, purpose-driven culture