Lead Security Engineer - Remote

Essential Duties and Responsibilities
- Serve as a subject matter expert and provide guidance on Information Security solutions, supporting other engineers in selection, integration, and optimization.
- Lead or actively contribute to other information security projects and operational duties, offering technical leadership and mentorship throughout.
- Implementation, configuration, and maintenance of Information Security solutions, ensuring best practices are followed and providing direction to engineering staff as needed.
- Coordinate and oversee level of effort, planning, and support for enterprise project-level work, providing technical leadership and aligning resources across teams.
- Prioritize and direct execution of program elements based on risk, business objectives, and organizational impact.

- Advise on security controls across cloud, network, and endpoint application environments.
- Perform security assessments, vulnerability analysis, and remediation tracking.

- Advise on security technologies such as SIEM, EDR, firewalls, and vulnerability scanning tools.

- Collaborate with system administrators, network engineers, and CI/CD Pipeline Engineers to address security risks.

- Assist with development and maintenance of security documentation, policies, procedures, and system security plans.

- Provide recommendations for improving security posture, compliance, and operational efficiency.

- Support implementation of Zero Trust, secure configuration management, and cloud security best practices.

- Review proposals/bids to confirm technical compliance requirements.

- Act as a technical ISO stakeholder in Enterprise Risk and Assurance activities

- Communicate upcoming initiatives, solution designs, and security or compliance considerations to ISO leadership.

Minimum Requirements

- Bachelor's Degree or equivalent experience and 7+ Years

- 5+ years of Security Engineering experience.

- Experience working with the US Federal government (current/previous federal employee or federal contractor) in a security engineering capacity.

- NIST 800-53 Security and Privacy Controls for Information Systems and Organizations

- NIST 800-171 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations

- Strong background regarding how to secure CI/CD pipelines.

- Good understanding of networking connectivity and network security controls.

- Understand endpoint security (servers, workstations)

- Understand applied Zero Trust.

- Experience with vulnerability management and remediation processes.

- Experience with Cloud security in AWS and/or Azure environment.

- Up to 10% travel is required.

- US Citizenship is required per contractual requirements.

- Any of the following is preferred: CISSP, CISA, CCSP, CISM, GIAC, AWS Security, or Azure Security certifications.

EEO Statement

Maximus is an equal opportunity employer.

We evaluate qualified applicants without regard to race, color, religion, sex, age, national ...