Federal Security Engineering Manager (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Location: US, Remote; up to 5% travel may be required. The role supports federal environments and requires U.S. citizenship, the ability to meet DoD personnel security requirements, and eligibility to obtain and maintain a U.S. government security clearance.
Base salary: $175,950–$230,000 annually, plus eligible equity in the form of stock options.
Company
is a remote cybersecurity product company developing NodeZero, a platform for production-safe autonomous penetration testing and security assessment operations across internal, external, cloud, and hybrid cloud environments.
What you will do
- Build, recruit, lead, coach, and retain a federal security engineering team covering cloud security, SIEM, and SOC operations.
- Set technical direction for AWS GovCloud security, identity and access management, network segmentation, encryption, key management, hardening, logging, and Infrastructure as Code controls.
- Ensure federal cloud controls align with FedRAMP High and DoD IL4/IL5 requirements, including architecture reviews, threat modeling, risk assessments, and secure SDLC integration.
- Define SIEM, log aggregation, detection, SOC operating models, on-call structures, escalation paths, and incident response for federal environments.
- Guide automation, SOAR and AI/ML-assisted triage, MITRE ATT&CK-aligned detection engineering, threat hunting, and purple-team improvements.
- Manage metrics, budget, tooling, vendors, standards, SOPs, and security posture reporting to leadership and federal stakeholders.
Requirements
- U.S. citizenship and ability to meet DoD personnel security requirements for IL4/IL5 environments; ability to obtain and maintain a U.S. government security clearance required.
- 8+ years of cybersecurity experience, including 5+ years in cloud security; AWS is strongly preferred.
- 3+ years managing or technically leading security engineers, with experience hiring, developing, and retaining strong talent.
- Experience building and scaling a security engineering team.
- Working knowledge of how FedRAMP High and DoD IL4/IL5 requirements affect cloud architecture, logging, and incident response.
- Strong foundation in cloud security architecture, IAM, encryption and key management, network security, secure SDLC, and Infrastructure as Code.
- Familiarity with SIEM, detection engineering, SOC operating models, incident response, and automation.
- Excellent written and verbal communication with engineers, executives, and government stakeholders.
- Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent practical experience.
Nice to have
- Experience establishing security capabilities for a SaaS product entering the federal market.
- Prior hands-on or leadership experience in FedRAMP or DoD IL4/IL5 environments.
- Background in incident management, detection engineering, log or event processing, or SOC build-out and scaling.
- Active security clearance.
- CISSP, CISM, CCSP, AWS Certified Security – Specialty, GCIH, GCIA, or similar certification.
Culture & Benefits
- Remote work with company-wide remote and hybrid models; some roles require regular presence at the Chicago office.
- Inclusive, collaborative culture emphasizing respect, ownership, accountability, and results.
- Health, vision, and dental insurance for employees and families.
- Flexible vacation policy, generous parental leave, and career development opportunities.
- Full-time employment with competitive compensation and equity eligibility.
Hiring process
- Submitted materials may redact age-identifying information, including age, date of birth, or dates of school attendance or graduation, without penalty.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →