Note: The job is a remote job and is open to candidates in USA. Maximus is an equal opportunity employer supporting federal information systems and data through technology and security services. The Lead Security Engineer provides technical leadership across security operations, compliance, vulnerability management, cloud security, and system authorization efforts, while guiding engineering teams and improving cybersecurity controls.
Responsibilities
- Serve as a subject matter expert and provide guidance on Information Security solutions, supporting other engineers in selection, integration, and optimization
- Lead or actively contribute to other information security projects and operational duties, offering technical leadership and mentorship throughout
- Implementation, configuration, and maintenance of Information Security solutions, ensuring best practices are followed and providing direction to engineering staff as needed
- Coordinate and oversee level of effort, planning, and support for enterprise project-level work, providing technical leadership and aligning resources across teams
- Prioritize and direct execution of program elements based on risk, business objectives, and organizational impact
- Advise on security controls across cloud, network, and endpoint application environments
- Perform security assessments, vulnerability analysis, and remediation tracking
- Advise on security technologies such as SIEM, EDR, firewalls, and vulnerability scanning tools
- Collaborate with system administrators, network engineers, and CI/CD Pipeline Engineers to address security risks
- Assist with development and maintenance of security documentation, policies, procedures, and system security plans
- Provide recommendations for improving security posture, compliance, and operational efficiency
- Support implementation of Zero Trust, secure configuration management, and cloud security best practices
- Review proposals/bids to confirm technical compliance requirements
- Act as a technical ISO stakeholder in Enterprise Risk and Assurance activities
- Communicate upcoming initiatives, solution designs, and security or compliance considerations to ISO leadership
Skills
- Bachelor's Degree or equivalent experience and 7+ Years
- 5+ years of Security Engineering experience
- Experience working with the US Federal government (current/previous federal employee or federal contractor) in a security engineering capacity
- NIST 800-53 Security and Privacy Controls for Information Systems and Organizations
- NIST 800-171 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations
- Strong background regarding how to secure CI/CD pipelines
- Good understanding of networking connectivity and network security controls
- Understand endpoint security (servers, workstations)
- Understand applied Zero Trust
- Experience with vulnerability management and remediation processes
- Experience with Cloud security in AWS and/or Azure environment
- US Citizenship is required
- Up to 10% travel is required
- Any of the following is preferred: CISSP, CISA, CCSP, CISM, GIAC, AWS Security, or Azure Security certifications
Benefits
- Short- and long-term incentives
- Program-specific awards
- Health insurance coverage
- Life and disability insurance
- Retirement savings plan
- Paid holidays
- Paid time off
- Remote work arrangement
Company Overview