Principal Security Engineer

Job not on LinkedIn

🔥 3 minutes ago

🇺🇸 United States – Remote

💵 $140k - $155k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Valiant Solutions

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2005

💼 Consulting

🎖️ Defense

🔒 Cybersecurity

Consulting • Defense • Cybersecurity

Valiant Solutions is a cybersecurity and IT services firm that specializes in securing the future by providing comprehensive and customized solutions to challenges faced by the Federal Government. With a focus on security engineering, operations, and strategic risk governance, the company addresses complex information security challenges through innovative application development and enterprise architecture. Recognized for its commitment to excellence, Valiant Solutions has been awarded numerous contracts and honors for its impactful contributions in the cybersecurity field.

📋 Description

• Provide technical expertise on security control implementations and develop information security procedures for systems and applications • Perform pre-assessment activities, including detailed analysis of technology stacks comprising vendor solutions • Assess vendor systems for technical compliance with NIST, FedRAMP, and agency standards • Perform detailed architecture and technical design reviews across the full stack for vendor solutions • Conduct architecture reviews of CSP authorization packages to validate secure design, FedRAMP and agency alignment, identify gaps, and advise on risk posture and compliance • Lead and conduct architecture interviews with CSPs • Develop architecture briefing documents for the Government FedRAMP program manager and CISO • Review and comment on CSP FedRAMP documentation, including system security plans, policies, procedures, agency guidance, alternative implementation, and risk acceptance documents • Work with CSPs to reconcile documentation and technology gaps • Review CSP assessments and package submissions after 3PAO audits and prepare package briefings • Review vendor security assessment plans, security assessment reports, vulnerability scans, and penetration tests • Provide security engineering services alongside the agency FedRAMP Lead • Support Continuous Monitoring activities, including annual package submissions, significant change proposals, and risk acceptance documents • Interpret FedRAMP and agency requirements and provide vendors with guidance • Monitor updated FedRAMP guidance, industry best practices, emerging technologies, and Government cybersecurity directives • Provide recommendations regarding impacts of updated guidance and technologies • Conduct security reviews of technologies for use within CSP authorization boundaries • Manage relationships for assigned contractor-owned or contractor-operated systems and ensure compliance with agency security and privacy requirements • Assist stakeholders with IT security activities to meet project deadlines • Ensure systems are operated, maintained, and disposed of in accordance with documented security policies and procedures, including Assessment & Authorization (A&A) • Research assigned IT security systems and provide architecture and security recommendations

🎯 Requirements

• Five (5) years of experience in the IT Security field • Bachelor’s degree in Computer Science, Information Systems, Mathematics, Engineering or a related field, OR an additional three years of IT experience required • Direct experience as a Security Engineer or System Architect performing analysis on FedRAMP Cloud Service Providers (CSP) architectures and control implementations • Four (4) years of hands-on technical experience as a System Architect or Security Engineer • Four (4) years of experience supporting FedRAMP as an Engineer or Architect • Security+, CISSP, CISM, CISA, or equivalent Security certification • Confidence and depth of understanding to lead meetings with potential Vendors • Current experience in reviewing 3rd party security assessment reports • Detailed knowledge and experience with NIST Policies, Governance, Security Planning and Architecture, FISMA Compliance, RMF, Incident Analysis, and General Security Best Practices • Strong written and oral communication skills • Ability to communicate with technical and non-technical stakeholders • Strong communication skills to interact with senior managers, junior staff, and business unit customers • Must maintain a quiet and distraction-free workspace with adequate internet • Must dedicate full attention and availability to job duties during working hours • Must maintain a schedule during core business hours aligned with coworkers and clients • Must disclose current or future outside employment engagements and obtain written approval • Must not solicit or conduct outside business during Valiant/client core business hours

🏖️ Benefits

• Valiant pays 99% of the Medical, Dental, and Vision Coverage for Full-time Employees • Valiant contributes 25% towards Health Coverage for Families and Dependents • 100% Paid Short-Term Disability and Life Insurance Policy for Full-time Employees • 100% Paid Certifications • 401K Matching up to 4% • Paid Time Off • Paid Federal Holidays • Valiant University – Online Education and Training Portal • Wellness & Fitness Program • FSA programs for: Medical Costs, Dependent Care, Transit, and Parking • Referral Bonuses • Work-life balance • Career development opportunities • Quiet and distraction-free workspace support for remote work • Flexible remote work arrangement