Senior Security Engineer

DecisionPoint Corporation is seeking a Senior Security Engineer to support secure enterprise cloud-hosted platforms in a federal and DoD-aligned mission environment. The role designs and implements secure architectures, cloud security controls, identity integrations, hardening baselines, security assessments, continuous monitoring, and remediation strategies.

Responsibilities:

• Design secure system architectures and cloud configurations in alignment with federal and DoD security requirements
• Implement IL5 controls, security baselines, and environment hardening across systems, applications, and cloud resources
• Apply STIG requirements and secure configuration checklists to cloud, OS, network, and application components
• Support secure single sign-on (SSO) integration, identity federation, certificate management, and authentication workflows
• Develop and maintain secure configuration baselines, encryption standards, and boundary protection controls
• Conduct security assessments, security testing, and vulnerability analysis to identify and remediate risks
• Review code, configurations, and deployment patterns for secure implementation
• Collaborate with cloud engineers, DevSecOps teams, and system owners to ensure secure deployment practices and change controls
• Participate in continuous monitoring activities including log review, alert triage, scanning, and compliance updates
• Provide detailed technical recommendations for remediation and mitigation strategies
• Support audit activities, authorization testing, and security documentation updates
• Produce architecture diagrams, security implementation plans, and technical design documentation
• Mentor junior engineers and contribute to organizational security engineering standards

Requirements:

• Must hold an active Top Secret clearance, supported by a Tier 5 background investigation
• Bachelor's degree in Computer Science, Engineering, Cybersecurity, or a related field
• Minimum 10 years of experience in security engineering, cybersecurity, or secure systems design
• Experience implementing IL5 or equivalent high-impact cloud security controls
• Experience applying STIGs, secure configuration baselines, and hardening guidelines
• Experience designing secure SSO, certificate management, and authentication integrations
• Experience performing security testing, vulnerability assessments, and remediation planning
• Experience supporting secure cloud deployments and modern enterprise architectures
• Strong knowledge of cloud security architectures, particularly in AWS
• Deep understanding of DoD cybersecurity requirements, NIST SP 800-53, and RMF-aligned controls
• Proficiency in STIG application, hardening techniques, and secure configuration standards
• Knowledge of identity and access management, certificate management, and PKI
• Experience with SIEM tools, log analysis, scanning tools, and continuous monitoring programs
• CISSP or CCSP or Security+
• Strong problem-solving and technical analysis skills for diagnosing complex security issues
• Excellent communication skills for conveying technical concepts to stakeholders
• Ability to design and document secure architectures, baselines, and implementation plans
• Strong attention to detail and precision in applying security controls and reviewing configurations
• Ability to balance mission needs with rigorous cybersecurity requirements
• Experience with AWS cloud-native security services and AWS security certifications
• Familiarity with Zero Trust architectures and modern boundary protection strategies
• Experience with container security, Kubernetes hardening, or cloud-native app security
• Understanding of DevSecOps pipelines, IaC scanning, and security automation tools
• AWS Security Specialty
• CISM
• GIAC security engineering or cloud certifications