Senior Security Engineer
OBSIDIAN Global, LLC
Washington, DC 20597
Hybrid work - Full-time

​

Benefits

• 401(k)

• Health insurance

• 401(k) matching

• Paid time off

• Vision insurance

• Dental insurance

• Life insurance

​

Full job description

Senior Security Engineer

​

Location: Remote

​

Clearance: Public Trust (U.S. Citizenship required)

​

Position Summary

The Senior Security Engineer will serve as a senior cybersecurity resource supporting a federal multi-cloud environment. This position will focus on cloud security architecture, NIST compliance, IAM, vulnerability management, security monitoring, incident response, automation, and Cloud Security Posture Management. This position will work across AWS, Azure, and related enterprise environments to strengthen the agency's security posture while supporting regulatory compliance and operational resilience.

​

Duties and Responsibilities

• Design and implement scalable security architectures for complex multi-cloud environments.

• Ensure cloud security solutions comply with agencies policies, government regulations, and applicable NIST security controls.

• Support security audits, assessments, compliance reviews, and remediation activities.

• Use FAA security tools such as CSAM to support compliance tracking, documentation, and security authorization activities.

• Develop, track, and remediate Plans of Action and Milestones (POA&Ms).

• Implement and maintain security monitoring capabilities across multiple cloud platforms to identify threats, vulnerabilities, and anomalous activity.

• Develop and maintain incident response procedures and support the investigation and remediation of cybersecurity incidents.

• Design and maintain Identity and Access Management (IAM) strategies, policies, and controls across cloud environments.

• Regularly review permissions, roles, and access policies to ensure least privilege and regulatory compliance.

• Develop security automation using Terraform, Ansible, cloud-native automation tools, or scripting technologies.

• Implement and maintain cloud security platforms such as Prisma Cloud CSPM to improve visibility, compliance, and overall cloud security posture.

• Conduct and support vulnerability assessments, penetration testing, patch management, and remediation activities.

• Coordinate corrective actions resulting from security audits, penetration tests, and vulnerability assessments.

• Develop and maintain security policies, technical procedures, security configurations, incident response plans, and compliance documentation.

• Conduct security awareness sessions and provide guidance to technical and non-technical stakeholders on cloud security best practices.

• Collaborate with cloud, network, infrastructure, application, and program teams to incorporate security throughout the technology lifecycle.

​

Required Qualifications

• Bachelor’s degree in Science, Technology, Engineering, Mathematics, or a related discipline.

• 10+ years of relevant cybersecurity experience, including at least 5 years working with cloud-based technologies.

• Demonstrated experience supporting U.S. Government agencies.

• Strong knowledge of NIST security controls, federal cybersecurity requirements, vulnerability management, and risk management practices.

• Experience supporting security audits, penetration tests, vulnerability assessments, patch management, and risk assessments.

• Experience designing or implementing security controls across AWS, Azure, or other enterprise cloud environments.

• Strong understanding of IAM, cloud security architecture, security monitoring, incident response, and vulnerability remediation.

• Ability to independently analyze complex cybersecurity issues and develop practical technical solutions.

• Strong written and verbal communication skills with the ability to communicate effectively with both technical teams and leadership.

• Strong attention to detail and documentation skills.

• U.S. Citizenship and ability to obtain a Public Trust.

​

Preferred Qualifications

• Master’s degree or Ph.D. in a technical or cybersecurity-related discipline.

• Experience with Prisma Cloud CSPM or similar Cloud Security Posture Management platforms.

• Experience with CSAM, POA&M management, RMF, and federal security authorization processes.

• Experience automating security or infrastructure functions using Terraform, Ansible, or cloud-native automation tools.

• Experience supporting security across both AWS and Microsoft Azure.

• Current certifications such as CISSP, CISSP-ISSEP, Security+, Network+, MCSE, or comparable cybersecurity certifications.

​

Obsidian Global, LLC is an Equal Employment Opportunity and Affirmative Action Employer. All qualified applicants will receive consideration for employment without regards to that individual's race, color, religion or creed, national origin or ancestry, sex (including pregnancy), sexual orientation, gender identity, age, physical or mental disability, veteran status, genetic information, ethnicity, citizenship, or any other characteristic protected by law.

​

Benefits:

• 401(k)

• 401(k) matching

• Dental insurance

• Health insurance

• Life insurance

• Paid time off

• Vision insurance

​

Experience:

• Security engineering: 10 years (Required)

• Cloud security: 5 years (Required)

​

Work Location: Hybrid remote in Washington, DC 20597