Principal Security Engineer

🔥 4 minutes ago

🇺🇸 United States – Remote

💵 $105k - $150k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 2%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Valiant Solutions

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2005

💼 Consulting

🎖️ Defense

🔒 Cybersecurity

Consulting • Defense • Cybersecurity

Valiant Solutions is a cybersecurity and IT services firm that specializes in securing the future by providing comprehensive and customized solutions to challenges faced by the Federal Government. With a focus on security engineering, operations, and strategic risk governance, the company addresses complex information security challenges through innovative application development and enterprise architecture. Recognized for its commitment to excellence, Valiant Solutions has been awarded numerous contracts and honors for its impactful contributions in the cybersecurity field.

📋 Description

• Provide technical expertise on security control implementations and develop information security procedures for systems and applications • Perform pre-assessment activities, including detailed analysis of technology stacks comprising vendor solutions • Assess vendor systems for technical compliance with NIST, FedRAMP, and agency standards • Perform detailed architecture and technical design reviews across the full stack for vendor solutions • Conduct architecture reviews of CSP authorization packages to validate secure design, FedRAMP and agency alignment, identify gaps, and advise on risk posture and compliance • Lead architecture interviews with CSPs to ensure critical control areas meet program requirements • Develop architecture briefing documents for the Government FedRAMP program manager and CISO • Review and comment on CSP FedRAMP documentation, including system security plans, policies, procedures, supplemental guidance, alternative implementation, and risk acceptance documents • Work with CSPs to reconcile documentation and technology gaps • Review CSP assessments and package submissions after 3PAO audits and prepare package briefings • Review vendor security assessment plans, security assessment reports, vulnerability scans, and penetration tests • Provide security engineering services alongside the agency FedRAMP Lead • Support Continuous Monitoring activities, including annual package submissions, significant change proposals, and risk acceptance documents • Interpret FedRAMP and agency requirements and provide vendors with technical and process guidance • Stay informed of updated FedRAMP guidance, industry best practices, emerging technologies, and Government cybersecurity directives • Recommend impacts of updated guidance and technologies to the FedRAMP Government Lead • Conduct security reviews of technologies for use within CSP authorization boundaries • Manage relationships for assigned contractor-owned or contractor-operated systems and ensure vendor compliance with security and privacy requirements • Assist stakeholders with IT security activities and project deadlines • Ensure systems are operated, maintained, and disposed of in accordance with documented security policies and procedures, including Assessment & Authorization • Research assigned IT security systems and provide architecture and security recommendations

🎯 Requirements

• Five (5) years of experience in the IT Security field • Bachelor’s degree in Computer Science, Information Systems, Mathematics, Engineering or a related field, OR an additional three years of IT experience required • Direct experience as a Security Engineer or System Architect performing analysis on FedRAMP Cloud Service Providers (CSP) architectures and control implementations • Four (4) years of hands-on technical experience as a System Architect or Security Engineer • Four (4) years of experience supporting FedRAMP as an Engineer or Architect • Security+, CISSP, CISM, CISA, or equivalent Security certification • Confidence and depth of understanding to lead meetings with potential Vendors • Current experience in reviewing 3rd party security assessment reports • Detailed knowledge and experience with NIST Policies, Governance, Security Planning and Architecture, FISMA Compliance, RMF, Incident Analysis, and General Security Best Practices • Strong written and oral communication skills • Ability to communicate with technical and non-technical stakeholders, senior managers, junior staff, business unit customers, and public audiences • Must be legally authorized to work in the United States • Able to obtain and maintain a Public Trust clearance • Quiet, distraction-free workspace with adequate internet for telework • Full attention and availability during working hours and schedule alignment with coworkers and clients • Disclosure of current or future outside employment and written approval for outside professional activities

🏖️ Benefits

• A choice of medical plans, from an affordable HSA option to a full-featured PPO, with generous company contributions • Dental and vision coverage for you and your family • Company-paid life, short-term disability, and long-term disability insurance • Optional supplemental life, accident, and critical illness coverage • 401(k) retirement plan with company match • Paid time off that grows with years of service • Paid federal holidays • Paid certifications and professional development • Valiant University training portal • Flexible spending accounts • Wellness and fitness program • Referral bonuses • Flexible remote work arrangement • Reasonable accommodations for qualified individuals with disabilities

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume