The Senior Manager-DevSecOps will lead security engineering efforts, manage a team, and ensure security compliance across CI/CD pipelines and cloud environments.
Responsibilities
Manage security incidents and conduct threat analysis
Continuously monitor security controls for all IT Security frameworks
Convey complex security concepts to technical and non-technical stakeholders
Ensure compliance with standards such as HIPAA, SOC2, GDPR, and CCPA
As a Senior Security Engineer, you will play a pivotal role in securing our entire technology stack - from application-level security to cloud infrastructure protection. You will lead comprehensive security initiatives across our AWS cloud environments and payment applications built with Node.js and GoLang microservices.
Responsibilities
Design and implement comprehensive security architecture for AWS cloud environments
Implement cloud security guardrails, security baselines, and configuration standards
Configure and manage AWS Shield for DDoS protection across payment processing infrastructure
Implement and optimize AWS CloudFront security configurations including WAF rules, SSL/TLS, and origin protection
Secure AWS services including EC2, ECS, EKS, Lambda, RDS, S3, and API Gateway
Lead architecture and security design reviews for new and existing technology solutions, create and maintain security architecture diagrams, patterns, and standards, and evaluate security controls across cloud, API, and on-premises environments.
Support cybersecurity engineering, security operations, vulnerability management, and continuous monitoring activities within Department of Defense (DoD) information systems.
Compensation
expected salary range for this position is $135,000.00 - $175,000.00
Responsibilities
Implement and maintain technical security controls in accordance with the NIST Risk Management Framework (RMF) and NIST Special Publication 800-53.
Support Information Security Continuous Monitoring (ISCM) activities in accordance with NIST SP 800-137.
Provide technical engineering support throughout the RMF authorization lifecycle.
Assess the effectiveness of implemented security controls and identify technical compliance deficiencies.
Develop and implement corrective actions to address security control weaknesses.
Penetration Tester supporting customer activities, conducting internal and external penetration testing of networks, web applications, databases, and cloud services.
Compensation
The likely salary range for this position is $122,230 - $165,370.
Responsibilities
Conduct internal and external penetration testing of networks, web applications, databases, and cloud services
Manually exploit and compromise networks, web applications, databases, and cloud services to include privilege escalation and lateral movement
Identify vulnerabilities, misconfigurations, and compliance issues
Write final reports, defend all findings to include the risk or vulnerability, mitigation strategies, and references
Provide security recommendations for developers, system administrators, project managers, and senior government stakeholders
Requirements
Bachelor's Degree in Computer Engineering, Computer Science, Electrical Engineering, Information Systems, Information Technology, Cybersecurity, or a closely related discipline
Nice to have: CEH – Certified Ethical Hacker Certification
Cloud Security ArchitectTEKsystems · Austin, US+4 more
Senior Cybersecurity Engineer / Information System Security Engineer (ISSE)CaVU Consulting · San Diego, US